The daily firehose — everything the toolchain shipped today, already filtered.
We read every release from the 1309 tools on our watchlist at the source — GitHub and GitLab release notes, vendor release pages and changelogs, project blogs and feeds, vendor press releases, and the source code behind the tag. Bug-fix-only releases and non-product newsroom noise are dropped; what's left is summarized down to the new capability, how to try it, and any screenshots or videos the release itself published. Every entry links to the sources it was built from.
READ AS
Focus:What features shipped and what problems they solve, plus launches, packaging and where the market is moving.
Leaves out:Command-line flags, API-only deltas, usage examples, and releases that are only refinements.
Focus:New security controls, new APIs, and product improvements you can put to work, plus anything an upgrade breaks.
Leaves out:Launch and marketing news, governance, pricing, and documentation changes with no operational effect.
Focus:Dashboards, reporting, and anything you can quantify: metrics, coverage, risk scores, compliance impact, vendor moves.
Leaves out:Settings, flags, API and command-line detail, library bumps, and minor releases with no reporting or posture angle.
Focus:API, SDK and MCP changes, new libraries, breaking changes in what you import, and cyber tooling.
Leaves out:Governance, SOC operations, and vendor launches with no developer surface.
AMOUNT
DETAIL
ORDER
This issue came out before editions were ranked, so it shows the Standard edition in issue order.
Impacket 0.13.1 adds MSSQL/RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. relay, dpapidump, TDS 8.0, WMIWMIWindows Management Instrumentation, Microsoft's built-in framework for querying and controlling Windows system state. Cyber tools use it for remote execution, inventory, and event subscriptions without dropping files to disk. PutClass/DeleteClass, SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments.ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. mgmt, shadow credentials, and more.
└──▷ GET THIS VERSION
$ git clone --branch impacket_0_13_1 https://github.com/SecureAuthCorp/impacket.git
# already have the repo? check out this version:$ git checkout impacket_0_13_1
Adds dpapidump.py, a new example script for dumping DPAPIDPAPIA Windows OS cryptographic API that encrypts and decrypts secrets tied to a user or machine identity, so applications can store credentials without managing raw keys themselves.-related secrets.
Adds checkMSSQLStatus.py, a new example for checking MSSQL status and Channel Binding Token (CBT) behavior.
Adds MSSQL and RDP relay servers to ntlmrelayx.py, including strict MSSQL relay support and TLS-backed TDS frame reassembly.
Adds NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. sign/seal removal paths and --remove-mic handling to ntlmrelayx.py for CVE-2025-33073-related relay workflows.
Adds shadow credentials commands to the interactive LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. shell in ntlmrelayx.py with updated KeyCreds handling for January 2026 Windows changes.
+16 moreshow less
Adds TDS 8.0 support in the MSSQL/TDS library for Force Strict Encryption targets, EPA channel binding, and TDS_SSVARIANT parsing.
Adds WMI PutClass/DeleteClass support and Remote Event Log subscription calls to the DCE/RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. and WMI layer.
Adds ACL management support, recursive rget, and richer share listing (type and comments) to smbclient.py.
Adds SMB server signing support, optional read-only shares, and KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application./NTLM authentication controls to the SMB server and relay.
Adds workstation/application name options, linked-server RPC enable/disable commands, and custom CBT support to mssqlclient.py.
Adds SAM history parsing to both secretsdump.py and regsecrets.py.
Adds SAM password timestamp output and offline NTDS row filtering by local domain SID to secretsdump.py.
Adds Remote Desktop Shadowing support to tstool.py.
Adds base64 output support and conversion of all TGS entries to ticketConverter.py.
Adds AES support for modern Windows environments and PAC buffer preservation to raiseChild.py.
Adds Basic Authentication support to exchanger.py.
Adds persistent registry key creation support to reg.py.
Adds an option to avoid forcing RC4-HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. when requesting a TGT in GetUserSPNs.py.
Adds a reusable ACL helper module to the library.
Adds LDAP CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. helpers and improved LDAP attribute handling.
Adds large-page ESEESEExtensible Storage Engine, a Microsoft-developed embedded database engine used in Windows components like Active Directory and Exchange; cyber tools use it to read those stores without needing a running service. tag parsing for Windows Server 2025 NTDS.dit files.
21 details in Everything
1 more release in this issue
· 2026-05-01 → 2026-05-19
impacket 0.13.1 adds MSSQL/RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. relay to ntlmrelayx, new examples (dpapidump, tstool RDP shadow), and SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. server signing controls
└──▷ GET THIS VERSION
$ git clone --branch 0.13.1 https://github.com/fortra/impacket.git
# already have the repo? check out this version:$ git checkout 0.13.1
Adds MSSQL and RDP relay servers to ntlmrelayx.py with strict MSSQL relay support and --remove-mic handling for CVE-2025-33073-related workflows
Introduces new dpapidump.py example to dump DPAPIDPAPIA Windows OS cryptographic API that encrypts and decrypts secrets tied to a user or machine identity, so applications can store credentials without managing raw keys themselves. secrets
Adds Remote Desktop Shadowing support to the tstool.py example
Adds SMB server signing controls, optional read-only shares, and KerberosKerberosA network authentication protocol that uses tickets issued by a trusted service. Users and services can prove their identities without sending a password to each application./NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. authentication controls to the library's SMB server implementation
Adds WMIWMIWindows Management Instrumentation, Microsoft's built-in framework for querying and controlling Windows system state. Cyber tools use it for remote execution, inventory, and event subscriptions without dropping files to disk. PutClass/DeleteClass support and Remote Event Log subscription calls to the DCE/RPCRPCRemote Procedure Call, a protocol that lets a program execute a function on another machine as if it were local, giving cyber tools a structured way to communicate across processes or hosts without managing raw sockets. and WMI library modules
+5 moreshow less
Adds LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory.CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. helpers to the Directory and data parsing library module
Adds persistent registry key creation support to reg.py example
Adds Basic Authentication support to exchanger.py example
Adds a new option to avoid forcing RC4-HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. when requesting a TGT in GetUserSPNs.py
Adds workstation/application name options and linked-server RPC enable/disable commands to mssqlclient.py
BloodHound v9.1.0 adds PDF attack pathattack pathA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. exports, AZAddOwner detection, JITJITA runtime compilation strategy where code is translated from an intermediate form to native machine instructions at execution time, giving tools the speed of compiled code without sacrificing dynamic flexibility. auth token login, IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. RDS auth, and API doc search.
└──▷ GET THIS VERSION
$ git clone --branch v9.1.0 https://github.com/SpecterOps/BloodHound.git
# already have the repo? check out this version:$ git checkout v9.1.0
Implements AZAddOwner relationship detection for Azure attack path analysis.
Adds auth token login support for Just-in-Time (JIT) access workflows.
Supports IAM RDS authentication in database connection pooling.
Enables searching the API docs by resource path.
Adds createdBy field to auth tokens for improved auditability.
+7 moreshow less
Exports selected columns from the Explore table for targeted data extraction.
Cleans up Cypher saved queries with category and subcategory organization.
Minimizes displayed elements in the UI when multiple nodes are returned by a Cypher query.
Adds node count metric for environment monitoring.
Migrates Owns/WriteOwner and AZ App Role post-processing to the Distributed Computation Architecture (DCA).
Adds Role-Based Filtering Badge on Principal Zone pages to surface access scope at a glance.
Updates accordion collapse and close behavior in the entity panel for improved navigation.
Penelope v0.20.0 adds a Windows Potato privilege-escalation module and selective upload support for post-exploitation modules.
└──▷ GET THIS VERSION
$ git clone --branch v0.20.0 https://github.com/brightio/penelope.git
# already have the repo? check out this version:$ git checkout v0.20.0
Adds a potato module for Windows privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources..
Adds selective upload support for the privesc, potato, credump, and AD modules, enabling targeted file delivery during post-exploitation.
ldeep 2.0.3 adds a command to remove Foreign Security Principals from Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments..
└──▷ GET THIS VERSION
$ git clone --branch 2.0.3 https://github.com/franc-pentest/ldeep.git
# already have the repo? check out this version:$ git checkout 2.0.3
SharpHound 9.2.0 adds Eligible Roles to Entity Panel, new Cypher functions (UNWIND, head, tail), and reserved tag_ prefix for custom kinds
└──▷ TRY IT
Chain Cypher queries to find eligible roles for an Azure principal.
$ MATCH (n:User) WHERE n.name = '<upn>' UNWIND n.eligibleRoles AS r WITH n, head(r) AS eligibleRole RETURN n.name, eligibleRole.displayName
Sort Cypher query results by exposure score in descending order.
$ MATCH (n:Group) RETURN n.name, n.exposureScore ORDER BY n.exposureScore DESC
Adds Eligible Roles section in the Entity Panel for supported Azure principals
Enables automatic node selection from search results via the Explore interface
Adds nodes(), relationships(), startNode(), and endNode clauses to Cypher queries on PostgreSQL backends
Adds UNWIND clause to expand list values into rows in Cypher queries
Adds head() and tail() functions for list navigation in Cypher expressions
+3 moreshow less
Enables result sorting in RETURN and WITH clauses in ascending or descending order
Supports chaining query parts in Cypher for multi-step queries on PostgreSQL backends
Implements near-instantaneous evaluation of LIMIT clauses on PostgreSQL backends
8 details in Everything
└──▷ BREAKING ON UPGRADE
!Custom OpenGraphOpenGraphA web metadata protocol, created by Facebook, that lets a webpage declare structured properties—title, image, description, type—so link previews render consistently across social platforms and messaging apps. kinds using the tag_ prefix will now fail validation and must be renamed.
1 more release in this issue
· 2026-05-06 → 2026-05-28
SharpHound v2.12.1 adds OpenGraphOpenGraphA web metadata protocol, created by Facebook, that lets a webpage declare structured properties—title, image, description, type—so link previews render consistently across social platforms and messaging apps. extension API permissions and is_display_kind icon support
Adds granular API permissions for managing OpenGraph extensions and schema data access
Sets default node icons and colors in OpenGraph based on the is_display_kind field in extension schemas
web-check 2.1.0 adds QRATOR and ddos-guard WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. checks, Hudson Rock integration, PORTS_TO_CHECK env var, and Astro.js support
└──▷ GET THIS VERSION
$ git clone --branch 2.1.0 https://github.com/lissy93/web-check.git
# already have the repo? check out this version:$ git checkout 2.1.0
└──▷ USE IT
Scan only specific ports like 80, 443, and 8080 by setting the environment variable before running.
shell
PORTS_TO_CHECK=80,443,8080 web-check <target_url>
Adds QRATOR WAF detection as a new check capability
Adds ddos-guard WAF detection as a new check capability
Integrates Hudson Rock for threat intelligence lookups
Adds PORTS_TO_CHECK environment variable to customize scanned ports
Astroify support allows the tool to be deployed via Astro.js
OpenOSINT v2.9.0 adds search_censys CLI command, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tool, and Censys integration
└──▷ GET THIS VERSION
$ git clone --branch v2.9.0 https://github.com/OpenOSINT/OpenOSINT.git
# already have the repo? check out this version:$ git checkout v2.9.0
└──▷ USE IT
Query open ports and services for an IP address from the command line.
shell
openosint censys 8.8.8.8 -t 30
Configure environment variables for authentication before running the tool.
OpenOSINT v2.3.0 adds --parallel for concurrent tool execution and --json flag for structured outputstructured outputForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. across all CLI commands.
└──▷ GET THIS VERSION
$ git clone --branch v2.3.0 https://github.com/OpenOSINT/OpenOSINT.git
# already have the repo? check out this version:$ git checkout v2.3.0
└──▷ TRY IT
Run multiple OSINT tools concurrently to reduce total scan time for a target.
Maigret v0.6.1 adds AI analysis mode, Cloudflare bypass, Docker web image, 20+ new sites, and makes PDF reports optional.
└──▷ GET THIS VERSION
$ git clone --branch v0.6.1 https://github.com/soxoj/maigret.git
# already have the repo? check out this version:$ git checkout v0.6.1
└──▷ TRY IT
Install Maigret with optional PDF report support after upgrading from a base install.
$ pip install 'maigret[pdf]'
Adds AI mode for automated analysis of OSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. results.
Adds Cloudflare bypass via a webgate mechanism for sites previously blocked.
Adds Docker web image with multi-stage building for easier self-hosted deployment.
Makes PDF report dependencies optional — install via pip install 'maigret[pdf]' to keep base installs lightweight.
Applies --proxy setting to CurlCffiChecker, enabling proxy use for TLS-fingerprint sites.
+5 moreshow less
Adds 3 new crypto investigation sites: Polymarket, Zora, and Revolut.me.
Adds OnlyFans with an activation mechanism.
Adds 18 new sites to the site check list in a single batch update.
Adds Faceit to the site list.
Supports Python 3.14.
10 details in Everything
└──▷ BREAKING ON UPGRADE
!PDF report dependencies are no longer installed by default; existing setups relying on PDF output will break unless pip install 'maigret[pdf]' is run after upgrading.
dnsrecon 1.6.1 adds DNSRECON_WORDLIST_DIRS env var to restrict REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. wordlist access
└──▷ GET THIS VERSION
$ git clone --branch 1.6.1 https://github.com/darkoperator/dnsrecon.git
# already have the repo? check out this version:$ git checkout 1.6.1
REST API now accepts only bundled wordlists or files within paths defined by DNSRECON_WORDLIST_DIRS
theHarvester 4.11.0 adds Mojeek, Dymo, and Shodan InternetDB as new OSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. discovery sources.
└──▷ GET THIS VERSION
$ git clone --branch 4.11.0 https://github.com/laramies/theHarvester.git
# already have the repo? check out this version:$ git checkout 4.11.0
└──▷ TRY IT
Harvest emails and hosts for a domain using the new Mojeek search engine source.
$ theHarvester -d example.com -b mojeek
Enrich discovered IPs with open-port and vulnerability data via the new Shodan InternetDB source — no API key required.
$ theHarvester -d example.com -b shodaninternetdb
Adds Mojeek as a supported search engine source for email and host discovery, with API key configuration.
Adds Dymo API as a new data verifier source with API key configuration for domain discovery.
Adds Shodan InternetDB as a new passive discovery data source.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The qwant source has been removed from the service list; any -s qwant usage will no longer work.
A suite of WiFi/Bluetooth offensive and defensive tools for the ESP32.
ESP32 Marauder v1.12.1 adds Apple Juice CLI command and channel hopping for Flock sniffing
└──▷ GET THIS VERSION
$ git clone --branch v1.12.1 https://github.com/justcallmekoko/ESP32Marauder.git
# already have the repo? check out this version:$ git checkout v1.12.1
Add apple_juice CLI command for Apple-specific RF interactions
Add Channel Hop capability to the Flock Sniff feature
Flipper Zero Unleashed Firmware, an unlocked alternative firmware.
Unleashed Firmware unlshd-088 adds GPS config and Nearby Files base pack
└──▷ GET THIS VERSION
$ git clone --branch unlshd-088 https://github.com/DarkFlippers/unleashed-firmware.git
# already have the repo? check out this version:$ git checkout unlshd-088
Nearby Files moved to the Base app pack.
Adds option to set baudrate for connected GPS module.
Enables adding or updating GPS position metadata in existing SubGHz, NFCNFCNear Field Communication, a short-range (≤4 cm) wireless standard maintained by the NFC Forum, enabling data exchange between devices; cyber tools use it to probe, emulate, or intercept contactless card and tag transactions., RFID, and iButton files.
3 details in Everything
1 more release in this issue
· 2026-05-04 → 2026-05-08
Unleashed Firmware unlshd-087 adds dozens of new SubGHz protocols, NFCNFCNear Field Communication, a short-range (≤4 cm) wireless standard maintained by the NFC Forum, enabling data exchange between devices; cyber tools use it to probe, emulate, or intercept contactless card and tag transactions. write support for ISO15693 and Mifare Ultralight C, plus two new public API functions.
└──▷ GET THIS VERSION
$ git clone --branch unlshd-087 https://github.com/DarkFlippers/unleashed-firmware.git
# already have the repo? check out this version:$ git checkout unlshd-087
└──▷ HOW TO FIND IT
Capture and replay or analyze the new Allstar Firefly 318ALD31K signal.
Predatory ESP32 firmware for M5Stack, Cardputer and LilyGo devices.
Bruce 1.15 adds NetCut ARPARPA network protocol that maps IP addresses to MAC addresses on a local Ethernet segment, letting tools resolve layer-3 targets to layer-2 hardware addresses for packet crafting or host discovery. module, WDGoWars wardriving upload, KeeLoqKeeLoqA proprietary block cipher developed by Microchip Technology, used in rolling-code systems for keyless entry devices; cyber tools target it to analyze or attack RF-based access control protocols. sub-ghz support, PN532 RFID emulation, and U2F/FIDO2FIDO2The open standard behind passkeys and hardware security keys, where a website checks a signature from the user's device instead of a password. Because the key is bound to the site, phishing pages cannot use it.
└──▷ GET THIS VERSION
$ git clone --branch 1.15 https://github.com/BruceDevices/firmware.git
# already have the repo? check out this version:$ git checkout 1.15
Adds the NetCut ARP feature under WiFi capabilities for network cut attacks inspired by Arcai.com
Adds WDGoWars (wdgwars.pl) upload support for wardriving data collection workflows
Introduces Custom SubGhz UI revamp for RCSwitch signals and adds native KeeLoq protocol support
Adds PN532 emulation mode for RFID cloning and simulation
Adds USB U2F/FIDO2 hardware support for the device
Decepticon v1.1.0 adds plugin override system, runtime /plugins and /agent slash commands, HTTP-only sandbox, and Soundwave 8-doc bundle expansion
└──▷ GET THIS VERSION
$ git clone --branch v1.1.0 https://github.com/PurpleAILAB/Decepticon.git
# already have the repo? check out this version:$ git checkout v1.1.0
decepticon.bundles entry-point group for declaring custom PluginBundle packages that override agent factories, roles, middleware, and prompts without forking the core code.
MiddlewareSlot.ENGAGEMENT_CONTEXT, MiddlewareSlot.SKILLS constants and build_middleware() function enable plugins to inject slots and skill sources directly in Python code.
All 16 agent factories now accept tools=, middleware=, and system_prompt= kwargs with full-replace semantics for composing custom agent pipelines.
LLMFactory.get_model(role, default_role=...) lets plugin orchestrators inherit an OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees. role's model assignment until they ship their own.
The HTTPSandbox class replaces the removed DockerSandbox; all sandbox interaction now flows through HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. over the management network, removing the need for a docker.sock mount.
+3 moreshow less
Two new slash commands: /plugins to list/enable/disable plugin bundles at runtime without restart, and /agent to switch the active orchestrator between OSS standard, vulnresearch, or any plugin-registered agent.
Long-running shell tools (e.g. nmap scans) now emit ● Background command finished — <output> events automatically upon completion.
Soundwave engagement planning interview now produces eight structured documents: plan/roe.json, plan/threat-profile.json, plan/conops.json, plan/deconfliction.json, plan/contact.json, plan/data-handling.json, plan/abort.json, and plan/cleanup.json.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!The internal decepticon.agents.assembly module has been renamed to decepticon.agents.build.
1 more release in this issue
· 2026-05-03 → 2026-05-21
Decepticon v1.0.16 adds Ollama support, DeepSeek V4 models, new hunting lanes, and make dogfood workflow
└──▷ GET THIS VERSION
$ git clone --branch v1.0.16 https://github.com/PurpleAILAB/Decepticon.git
# already have the repo? check out this version:$ git checkout v1.0.16
└──▷ TRY IT
Build a Docker image with a specific version tag for release automation.
$ docker build --build-arg VERSION=v1.0.16 .
Run the OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees. UX validation flow in an isolated environment to verify launcher and CLI behavior.
$ make dogfood
Adds --build-arg VERSION=<tag> to Docker builds for release flow automation and make dogfood command for OSS UX validation in .dogfood/ directory
Introduces DeepSeek V4 models with v4-pro and v4-flash profiles supporting 1M context, reasoning, and tool calls
Adds three new analyst hunting lanes: Trust-boundary (Lane F), Pattern-exhaustion (Lane G), and Bounty target assessment (Lane H)
Integrates two new CLI tools: bounty_scope_check and format_bounty_report
Deploys new skill file skills/exploit/web/smuggling.md for Class A vs Class B HRS branching analysis
+1 moreshow less
Updates launcher client (clients/launcher/cmd/ollama_models.go) to use parallel fan-out for /api/tags and /api/show endpoints
6 details in Everything
└──▷ BREAKING ON UPGRADE
!Removes make sync-version command from the build flow
New android-apk-research capability bundle, Jira and GitHub MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. connectors, artifact logging tools, and IDORIDORInsecure Direct Object Reference, a web vulnerability where an application exposes internal identifiers (IDs, filenames) without access checks, letting an attacker substitute another user's ID to reach their data./BOLABOLABroken Object Level Authorization, an API vulnerability class where a server fails to verify that the requesting user owns or may access the object ID they supply, letting attackers read or modify other users' data. judge rubric for Dreadnode.
android-apk-research capability bundle ships with a 10-tool MCP server and four skills for static semantic vulnerability research on Android APKs
New Jira MCP connector lets web-security agents export validated findings directly to Jira Cloud as remediation tickets
New GitHub MCP connector lets web-security agents file findings as GitHub issues and add follow-up comments without leaving the agent workflow
Four new path-based logging tools for web-security agents: log_image_output, log_audio_output, log_video_output, and log_file_artifact to attach screenshots, audio, video, and file artifacts directly to a run
New built-in IDOR/BOLA rubric available for the SDK’s default LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. judge scorer with graduated pentest-aligned cross-boundary access criteria
+2 moreshow less
Home page now shows a live activity feed with recent projects, sessions, evaluations, training jobs, and other workspace activity
Organization administrators can grant each member access to a specific set of AI models, enforced across the web app, API, and CLI
7 details in Everything
3 more releases in this issue
· 2026-05-07 → 2026-05-28
New compound eval verification strategies (script_and_judge, flag_and_judge) and an agentic outcome judge for Dreadnode
script_and_judge and flag_and_judge are new eval task verification methods that chain mechanical checks with an LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. outcome judge to close reward-hacking gaps.
New dn outcome-judge run CLI subcommand exposes the agentic outcome_judge verification method for inspecting agent trajectories and emitting pass/fail verdicts.
New opt-in policy introduces the intent_plus_outputs_summary guard strategy, replacing raw tool outputs with LLM-generated summaries in judge prompts to reduce prompt-injectionprompt-injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. surface.
Six new web-security capability skills are now available as knowledge distillations: ESI injection, gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication.-Web pentest, H2C/WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. smuggling, HTTP connection contamination, timing-attack recon, and XSLT injection.
waymore is added to the web-security capability runtime for historical URL and response retrieval from Wayback Machine, CommonCrawl, OTXOTXAlienVault's Open Threat Exchange, a community platform where researchers share indicators of compromise; cyber tools integrate it to pull live threat intelligence feeds without building their own collection infrastructure., URLScan, and VirusTotal.
+1 moreshow less
Organization admins can now control which AI models each member is allowed to use via a new setting on the org members admin page.
Free-text search, session rewind, cross-org shares, and auto-installing sandbox deps in Dreadnode.
Adds free-text search in hosted evaluation trajectories with inline match highlighting and auto-expanding tool calls.
Adds /rewind subcommand and double-Esc keybinding to roll back a conversation session history via the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency..
Enables cross-org capability share links that automatically redirect recipients to the correct page regardless of their org slug.
Enables sandbox runtimes to auto-install Python packages and system dependencies declared in capability manifests at load time.
Dreadnode GA: Report templates, DOCX export, GuardSessionPolicy with LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. tool gating, dn CLI overhaul
AIRT Report Builder graduates to general availability with saved templates (load/save/rename/delete), custom branding support (logo, company name, title, confidentiality footer), and DOCX export
GuardSessionPolicy gates every agent tool call through an LLM judge before execution using a built-in safety rubric and optional custom rules
GuardSessionPolicy supports five transcript strategies (rubric_only, intent_only, intent_plus_calls, full) to control judge context
New dn session CLI command group and export endpoint convert session transcripts to ATIF v1.7 or OpenAI Chat Completions format
Introduces RAMRAMWorking memory that holds programs and data while a computer is running. Its contents usually disappear when power is removed.-only scan admission by removing dead CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware./disk slot inputs.
└──▷ GET THIS VERSION
$ git clone --branch v4.4.20 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.4.20
9 more releases in this issue
· 2026-05-07 → 2026-05-27
v4.4.15 adds findings pagination, deduplication, and stable summary API; relocates data dir.
└──▷ GET THIS VERSION
$ git clone --branch v4.4.15 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.4.15
findings_consistency_and_pagination spec enables pagination on the Findings page with configurable size in [25, 50, 100, 200] rows (default 50) and URL-synced params ?page=&size=.
New /api/findings/summary endpoint provides stable, deduplicated counts with ETag/304 support for consistent totals during background polling.
effectiveVulnCount(inst, sess) consolidates vulnerability counting into a single monotonic source that reads in-memory and persists without dropping.
reporting.PromoteToParent called on every report_vulnerability ensures child scan findings immediately aggregate to the parent record even during panics.
Workspace default migrated to ~/.xalgorix/data with automatic non-destructive import from legacy ~/xalgorix-data/ directory via sentinel file .legacy-imported.
+2 moreshow less
safe.Recover panic boundaries added for child findings and HTTP middleware; counters exposed (PanicsRecovered, PathRejections, WatchdogKills, AdmissionRefusals).
sandbox.Policy path allow-list checks enforced for every fs-touching tool to enhance workspace isolation.
7 details in Everything
└──▷ BREAKING ON UPGRADE
!Workspace data directory default changed from ~/xalgorix-data/ to ~/.xalgorix/data; legacy path preserved but marked for removal.
xalgorix v4.4.8 adds recurring scheduled scans with disk-persisted configs and a frontend dashboard for management.
└──▷ GET THIS VERSION
$ git clone --branch v4.4.8 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.4.8
└──▷ HOW TO FIND IT
Manage scan schedules directly through the new UI interface.
📍Open the frontend dashboard › Use CRUD modal to create/edit a schedule
Add file_upload vuln type to all mapping tables
cweIDToName reverse lookup and owaspIDToName direct lookup maps added for security framework mappings (CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances., OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10, PTES)
Frontend dashboard with CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. modal, status toggles, and manual triggers for managing scans
Recurring scheduled scans (hourly/daily/weekly/monthly) with disk-persisted configs
xalgorix v4.4.2 adds live feed event export in JSON, JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory., and transcript formats.
└──▷ GET THIS VERSION
$ git clone --branch v4.4.2 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.4.2
xalgorix v4.3.7 adds proxy support (HTTP/HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate./SOCKS5SOCKS5A proxy protocol that relays TCP and UDP traffic through an intermediary server without inspecting it, letting cyber tools tunnel connections through firewalls or pivot hosts with minimal overhead.) with auto-rotation
└──▷ GET THIS VERSION
$ git clone --branch v4.3.7 https://github.com/xalgorix/xalgorix.git
# already have the repo? check out this version:$ git checkout v4.3.7
Strix v1.0.0 adds native tool callingtool callingA model's ability to answer with a structured request to run a named function or API, which the application executes and returns. It is how agents take actions., save/resume, multi-agent control, new skills and providers
└──▷ GET THIS VERSION
$ git clone --branch v1.0.0 https://github.com/usestrix/strix.git
# already have the repo? check out this version:$ git checkout v1.0.0
Enables save and resume workflow for long-running agent sessions
Adds native tool calling capability for integrated cyber tooling
Supports multi-agent control workflows
Adds Kubernetes security testing skill
Adds NoSQL injection vulnerability skill
+2 moreshow less
Adds SSTISSTIServer-Side Template Injection, a vulnerability class where attacker-controlled input is evaluated by a server-side template engine, enabling remote code execution or data exfiltration. and Header Injection vulnerability skills
Adds Novita AI as a supported LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. provider
brutespray v2.6.2 adds SSH bad-key detection, pre-auth RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. recon, stdin pipeline support, 5 new DB modules, SNMPSNMPA UDP-based protocol for querying and managing network devices, standardized by the IETF. Cyber tools use it to pull interface stats, topology data, and device state from routers, switches, and servers at scale. tiering, and inline creds.
└──▷ GET THIS VERSION
$ git clone --branch v2.6.2 https://github.com/x90skysn3k/brutespray.git
# already have the repo? check out this version:$ git checkout v2.6.2
└──▷ TRY IT
Check SSH targets for known-bad/default keys only (no password spray) — ideal for quick exposure triage after a scan.
Adds SSH bad-keys pre-pass: embedded Rapid7 ssh-badkeys corpus (plus Vagrant, F5, Barracuda, and others) compiled into the binary, with CVE-tagged metadata and BADKEY/type:badkey output; controlled via --no-badkeys and --badkeys-only.
Adds pre-auth RDP recon (brute.ScanRDPRecon): X.224 NLA fingerprinting without authentication, plus sticky-keys backdoor detection (T1546.008) when NLA is not enforced; disable with --no-rdp-scan.
Adds stdin pipeline ingestion: auto-detects naabu, Nerva URI/JSON, fingerprintx JSON, and masscan -oJ formats when no -f or -H is supplied, enabling chains like naabu | fingerprintx | brutespray.
Adds five new database brute-force modules: CouchDB (5984), Elasticsearch (9200), InfluxDB (8086, v1/v2 via -m mode:v1), Neo4j (7687, Bolt v5), and Cassandra (9042, CQL native), bringing total service count to 41.
Adds SNMP community-string tiering via -m mode:default|extended|full (20/55/92 entries), with full covering SCADA, IP camera, and storage-array defaults.
+3 moreshow less
Adds -c/--creds flag for inline credential pairs ('user:pass,user2:pass2') without requiring a file.
Adds new TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. Findings tab populated from pre-auth recon results, color-coded by severity (INFO/WARN/HIGH/CRITICAL).
Adds Finding and KeyMatch fields to BruteResult, surfaced in text, JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. (type:finding), and TUI output.
8 details in Everything
1 more release in this issue
· 2026-05-03 → 2026-05-29
Adds -delay duration flag (e.g. -delay 10s) as an ergonomic alternative to fractional -rate values for slow brute-force scenarios.
Updates -rate help text to clarify fractional values are supported (e.g. -rate 0.1 = one attempt every 10 s).
Adds govulncheck CI workflow scanning all Go dependencies against the Go vulnerability database on every push/PR and weekly.
Adds dependency-review action that blocks PRs introducing dependencies with known moderate-or-higher severity vulnerabilities.
Monthly wordlist update with new SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. credential overrides.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Using both -delay and -rate together exits with an error — they are mutually exclusive.
Metasploit Pro 5.0.0-2026051301 adds read-only MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server and NTLMNTLMA Windows authentication protocol that proves knowledge of a password through a challenge and response. Captured authentication exchanges can be abused in relay attacks when protections are absent. relay module
Adds a read-only MCP server for Metasploit capable of retrieving information from loaded modules and database.
Adds an NTLM relay module that relays from HTTP to LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory., opening an authenticated LDAP session upon success.
IP Restrictions feature allows org admins to restrict access based on an IP allowlist
└──▷ HOW TO FIND IT
Restrict org access to specific CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. blocks for admin users
📍In the console, go to Organization Settings › IP Restrictions and add your approved IP ranges to the allowlist.
Adds IP Restriction configuration at the organization level to enforce access via an allowlist of approved IP addresses or CIDR ranges
Empire v6.6.0 adds 49 ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior.-mapped modules, 8 new BOFs (including nanodump & bofroast), a pre-obfuscation API endpoint, and Alembic DB migrations.
└──▷ GET THIS VERSION
$ git clone --branch v6.6.0 https://github.com/BC-SECURITY/Empire.git
# already have the repo? check out this version:$ git checkout v6.6.0
└──▷ TRY IT
Run the full Empire test suite, or pass pytest arguments to target a specific test file or marker.
$ ./ps-empire test -k mysql -v
Tune MySQL connection pool size and enable pre-ping health checks to prevent pool exhaustion under high agent concurrency.
Adds nanodumpBOFBOFA Buffer Overflow exploit technique where attacker-controlled input overwrites adjacent memory to hijack program execution; cyber tools use it to develop and deliver shellcode-based exploits against vulnerable binaries. module for LSASS minidump creation using multiple evasion techniques (handle duplication, process forking, snapshot, seclogon handle leaking).
Adds 7 new BOF modules from Sliver Armory: unhook (EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device./AV API hook removal), patchit (AMSI+ETWETWEvent Tracing for Windows, a Microsoft kernel-level logging framework that lets applications and drivers emit structured events; cyber tools use it to observe process, network, and file activity without installing additional sensors. all-in-one), inject_amsi_bypass, inject_etw_bypass, credman (Credential Manager dump), handlekatz (LSASS via handle duplication), and bofroast (CLR-free KerberoastingKerberoastingAn attack that obtains Kerberos service tickets and tries to crack their encrypted contents offline. Recovering a weak service-account password can give the attacker that account's access.).
Adds multi-language stager support (powershell, csharp, ironpython, go) to UAC bypass modules: bypassuac, bypassuac_env, bypassuac_eventvwr, bypassuac_sdctlbypass, bypassuac_wscript.
Adds POST /api/v2/obfuscation/modules/preobfuscate endpoint to trigger background pre-obfuscation of specific modules by ID (returns HTTP 202).
Adds Alembic database migration framework for versioned schema management, including migrate_db() and backup_db() helper functions.
+6 moreshow less
Adds configurable MySQL connection pool settings (pool_size, max_overflow, pool_pre_ping, pool_recycle) via server config YAML, with pool health monitoring that warns at 80% capacity.
Adds configurable obfuscation.timeout setting (default 300s, disable with 0) for the PowerShell obfuscation subprocess, configurable via config.yaml or EMPIRE_OBFUSCATION__TIMEOUT env var.
Adds ./ps-empire test command as a convenience wrapper for pytest with passthrough arguments.
Adds strict and suggested_values fields to boolean switch options in modules for improved validation and UI hints.
Adds dynamic depends_on support to stagers so dependent fields (Bypasses, Obfuscate, ObfuscateCommand) show or hide based on the selected listener type.
Updates Starkiller to v3.5.0.
11 details in Everything
└──▷ BREAKING ON UPGRADE
!The legacy archive field is removed from empire_compiler config; replace it with repo and ref.
!High-frequency hooks (AFTER_AGENT_CALLBACK_HOOK, AFTER_TASKING_RESULT_HOOK, AFTER_AGENT_CHECKIN_HOOK, AFTER_TASKING_HOOK) now receive None as the session argument instead of an active session — any hook code that uses the passed session directly will break.
ZeroPath is an AI-native SAST platform that finds 2x more real vulnerabilities with 75% fewer false positives.
ZeroPath 2026-05 adds Runtime Validation, On-Demand Code Scans, Azure DevOps PR scanning, and SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. reachability filtering.
Adds Runtime Validation (early access) to dynamically confirm SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment. findings against the running application with Confirmed/Disconfirmed verdicts.
Introduces On-Demand Code Scans (beta) for submitting diffs or snippets for asynchronous review without full repo scans.
Adds Azure DevOps as a supported platform for PR scanning.
Adds severity-level checkboxes and PR grouping for scan filtering in the UI.
Enables SCA vulnerability filtering by Wiz Exposure to focus on internet-facing dependencies.
+5 moreshow less
Adds SCA_NEW_ISSUE event trigger for AI AppSecAppSecApplication security: the practice of finding and fixing vulnerabilities in software during design, development, and testing. Cyber tools build on AppSec workflows to shift vulnerability detection earlier in the development lifecycle. Assistant integration.
Introduces Real-time notifications for SCA issues via Slack and webhooks.
Exposes V2 API endpoints for querying Wiz CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. settings, projects, assets, and exposures.
Adds support for boolean, number, and select dropdown parameter types in Playbook templates.
Enables Linear auto-ticketing with automatic assignee resolution modes.
10 details in Everything
└──▷ BREAKING ON UPGRADE
!The functionSummary field has been removed from vulnerability API response schemas.
skylos v4.14.0 introduces Deep Mode audit foundation and SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. evidence packets
└──▷ GET THIS VERSION
$ git clone --branch v4.14.0 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v4.14.0
Add Deep Mode audit foundation to the security scope.
Add SSRF evidence packets to capture network-based server-side request forgeryserver-side request forgeryServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. indicators.
Complete deep audit workflow phases for systematic security assessment.
Skylos v4.12.0 introduces a VS Code review queue with provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. tracking and improves architecture analysis by suppressing library re-export false positives.
└──▷ GET THIS VERSION
$ git clone --branch v4.12.0 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v4.12.0
Adds review queue provenance in the VS Code extension to show where each finding originates
Skylos v4.11.0 adds AI PR risk passports, evidence cards, OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. coverage, and security flags
└──▷ GET THIS VERSION
$ git clone --branch v4.11.0 https://github.com/duriantaco/skylos.git
# already have the repo? check out this version:$ git checkout v4.11.0
Adds cicd AI PR risk passport generation to analyze pull request security posture.
v1.18.1 adds corporate SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. proxy support via --ca-cert/config and workspace-scoped direct fix commands for npm/pnpm/yarn/bun monorepos
└──▷ GET THIS VERSION
$ git clone --branch v1.18.1 https://github.com/OWASP/cve-lite-cli.git
# already have the repo? check out this version:$ git checkout v1.18.1
└──▷ TRY IT
Scan or sync advisories through a corporate MITM proxy that requires a custom CA certificate.
cve-lite config set ca-cert <path> saves a PEM CA certificate path persistently in ~/.cve-lite-cli/config.json for corporate SSL proxy support
Adds --ca-cert <path> CLI flag to pass a PEM CA certificate for a single scan or advisory sync invocation
Workspace-scoped direct fix commands now include the appropriate workspace flag (npm install -w <workspace>, pnpm add --filter ./path, yarn workspace <name> add, bun add --filter <name>) for npm, pnpm, yarn, or bun workspace projects
GitHub Action gains a matching ca-cert input for corporate SSL proxy configuration
4 details in Everything
6 more releases in this issue
· 2026-05-02 → 2026-05-27
cve-lite-cli v1.18.0 adds OSVOSVOpen Source Vulnerabilities, a vulnerability database and schema maintained by Google that gives cyber tools a machine-readable, cross-ecosystem format for querying and sharing CVE-style advisories. retry logic and pnpm/yarn/bun lockfile-refresh fix commands
└──▷ GET THIS VERSION
$ git clone --branch v1.18.0 https://github.com/OWASP/cve-lite-cli.git
# already have the repo? check out this version:$ git checkout v1.18.0
Adds targeted retry and offline hints for OSV 429 rate-limit and 5xx server error responses
Adds pnpm update, yarn upgrade, and bun update commands to --fix when the parent's declared range already covers the fixed transitive dependency version
Adds fix coverage count ("Running these commands should fix X of Y findings") to terminal and HTML output for lockfile-refresh targets
Adds CycloneDXCycloneDXAn open standard for describing software components and their dependencies, vulnerabilities and other supply-chain information. Tools use it to exchange bills of materials and related evidence.SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. output via --cdx and GitHub Action input for cve-lite-cli v1.16.0
└──▷ GET THIS VERSION
$ git clone --branch v1.16.0 https://github.com/OWASP/cve-lite-cli.git
# already have the repo? check out this version:$ git checkout v1.16.0
└──▷ USE IT
Generate a compliance-ready SBOM of all dependencies in the current directory.
shell
cve-lite-scan --cdx
Enable CycloneDX output in a GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure. workflow.
yaml
- uses: cve-lite-cli/action@v1
with:
cdx: true
Adds --cdx flag to generate a CycloneDX 1.4 JSON SBOM including all lockfile packages as components
Adds cdx input (default false) to the GitHub Action for enabling CycloneDX output
cve-lite-cli v1.15.1 adds --usage filtering, SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface. output, and GitHub Action inputs
└──▷ GET THIS VERSION
$ git clone --branch v1.15.1 https://github.com/OWASP/cve-lite-cli.git
# already have the repo? check out this version:$ git checkout v1.15.1
--sarif flag generates a SARIF 2.1.0SARIF 2.1.0A JSON-based file format, standardized by OASIS, for expressing static analysis results so that cyber tools from different vendors can share findings through a single, machine-readable schema. file for upload to GitHub Code Scanning
no-cache input added to the GitHub Action, defaulting to true in CI environments
Adds --no-cache flag for fresh OSVOSVOpen Source Vulnerabilities, a vulnerability database and schema maintained by Google that gives cyber tools a machine-readable, cross-ecosystem format for querying and sharing CVE-style advisories. queries and transitive context columns in reports
└──▷ GET THIS VERSION
$ git clone --branch v1.14.0 https://github.com/OWASP/cve-lite-cli.git
# already have the repo? check out this version:$ git checkout v1.14.0
--no-cache flag forces a fresh OSV query for all packages in a single scan, bypassing the queryEntries cache while still writing results back so subsequent runs benefit from caching as normal. Mutually exclusive with --offline and --offline-db.
Transitive context column added to the HTML report findings table, showing the dependency path from each vulnerable transitive package back to a direct dependency.
Mend Platform v26.5.1 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server exposure for security findings and new Admin group assignment setting
└──▷ HOW TO FIND IT
Query top security issues in a repo via an AI agent using the MCP server.
📍ask "What are the top 5 security issues in this repo?" to your preferred MCP-compatible AI tool
Manage application access by configuring automatic Admin group assignment.
📍Navigate to Administration › Application Settings and enable Assign new apps to Admin group in the Mend Platform console
Adds MCP server exposing SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment. and SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. security findings with remediation suggestions to AI-powered tools via the Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface..
Adds a new Administration setting to control whether newly created applications are automatically assigned to the Admin group.
2 details in Everything
2 more releases in this issue
· 2026-05-03 → 2026-05-31
Mend SAST is a static application security testing service that scans source code for vulnerabilities and helps teams prioritize remediation.
Mend SAST 26.4.2 adds Python smbclient taint analysis, server-side only SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. for JS, and VS Code integration.
Adds taint analysis support for Python smbclient to enhance detection of path traversal vulnerabilities.
Changes SSRF reporting in JavaScript to report only when detected on the server side, improving finding accuracy.
Adds Secret scanningSecret scanningChecking files, code or other data for exposed credentials such as passwords, API keys and tokens. Findings help teams remove the secret and revoke or rotate it. availability in Mend for Visual Studio Code.
Adds Device Protection agent to block malicious packages, embeds Aikido AI Chat in AutoFix and Code Analysis, and exposes List Cloud rules, project mapping, and CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. report AP
Adds Device Protection agent to stop supply chain attacks at install time by blocking malicious packages (npm, PyPI, Maven, NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code.) and risky IDE/browser extensions.
Embeds Aikido AI Chat in the AutoFix and Code Analysis Modal UI for natural language interaction and PR changes without leaving the product.
Adds support for Supabase common configuration issues in Cloud security checks.
Adds ability to pass custom context to AutoFix via .aikido files.
Adds Aikido Infinite support for Custom Frequencies (e.g., every 6 weeks).
+5 moreshow less
Adds Zen Firewall Agent releases for Dotnet, Python, PHP, Ruby, Golang, and Node.
Adds Outbound Request Blocking support for the Ruby Zen Firewall Agent.
Releases new IDE agent versions for VSCode, JetBrains, and Eclipse.
Adds List Cloud rules API endpoint.
Adds Get project / repository mapping API endpoint.
New Device Protection agent with real-time malware blocking, extension governance, and approval workflows for developer devices
Introduces the Device Protection agent covering malware blocking, extension governance, and group-based policies across npm, PyPI, Maven, NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code., VS Code, OpenVSX, Chrome, and skills.sh.
Adds a request-and-approval workflow where blocked installs trigger a one-click exception request reviewed in the Aikido Inbox.
Snyk Code announces expanded .NET crypto detection and PHP SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does. interfile analysis for June 15, 2026.
Adds TLS vulnerability detection (CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances.-326) for .NET HTTP and network stacks including ServicePointManager, HttpClientHandler, WinHttpHandler, SocketsHttpHandler, Kestrel, and SslStream.
Broadens Insecure Cipher coverage (CWE-327) for .NET C# and VB to include BouncyCastle third-party library support and flags algorithms such as PAKE, Triple DES, DES, Skipjack, RC4, RC2, MD-5, and SHA-1SHA-1A cryptographic hash function standardized by NIST that produces a 160-bit digest; tools use it for file integrity checks, though it is now considered cryptographically broken and unsuitable for collision-resistant applications..
Expands weak-key-size detection (CWE-326) for .NET native standard-library types (ECDHE, ECDH, ECDSAECDSAThe elliptic-curve signature algorithm behind most TLS certificates, blockchains and many hardware keys. It is one of the algorithms post-quantum signatures are meant to replace., RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it., AES GCM, HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it.-SHA1/2/3) and adds third-party support for DH, DHE (BouncyCastle), AES-XTS (BouncyCastle), and CMAC-AES (BouncyCastle).
Enables PHP SQL injection interfile taint flow detection through wrapper classes where the sink is defined in a wrapper class (caller → wrapper → mysql_query).
4 details in Everything
5 more releases in this issue
· 2026-05-08 → 2026-05-28
Snyk CLI v1.1305.0 adds SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. generation resilience, parallel container monitoring via env var, and experimental MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. breakability tool.
Adds --allow-incomplete-sbom flag to snyk sbom command to generate output even when individual projects fail resolution
Adds SNYK_REQUEST_CONCURRENCY environment variable to configure parallel dependency request concurrency for snyk container monitor
Adds an experimental breakability evaluation tool to the Snyk MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface.
Snyk Studio introduces asynchronous hooks-based guardrails in Early Access, with automated installation for supported agentic development environments.
Adds a new hooks-based guardrail architecture to Snyk Studio that runs security scans asynchronously in the background, replacing the previous rules-based model.
Adds an automated installation script that configures /snyk-fix, /snyk-batch-fix, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server, and secure dependency health check skills on supported Agentic Development Environments (ADEs).
Enables MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies.-based distribution of the Snyk Studio hooks installation script for enterprise-wide deployment on Windows and Mac.
OpenTaint v0.3.0 adds precise generic type constraint in YAML rule patterns, hidden directory skipping in autobuilder, and ERROR/NOTE tier separation for Java XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. rules.
└──▷ GET THIS VERSION
$ git clone --branch v0.3.0 https://github.com/seqra/opentaint.git
# already have the repo? check out this version:$ git checkout v0.3.0
YAML rule patterns now enforce generic type arguments (e.g., ResponseEntity<Resource>) instead of silently dropping them
Java wildcard (?) is now first-class in rule patterns, enabling precise return-type filtering via pattern-not-inside
Spring DeferredResult is recognized as a taint pass-through, allowing flow tracking through setResult / setErrorResult
Java XSS rules are split into ERROR-tier (xss-in-servlet-app, xss-in-spring-app) for CI gates and NOTE-tier for broader detection
4 details in Everything
1 more release in this issue
· 2026-05-14 → 2026-05-15
OpenTaint rules v0.2.0 tunes XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. rules by separating ERROR and NOTE severity levels.
└──▷ GET THIS VERSION
$ git clone --branch rules/v0.2.0 https://github.com/seqra/opentaint.git
# already have the repo? check out this version:$ git checkout rules/v0.2.0
Openlayer Spring 2026 adds Gateway, Helm chart, Salesforce integration, new guardrails/tests, customizable dashboards, and API filters.
Adds openlayer Gateway, a managed control layer for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. calls with an admin portal for per-key rate limits, freeze, and team-based organization
Adds on-prem Helm chart published to Docker Hub OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. for Kubernetes deployments with config for storage, database, replicas, image pull secrets, and Node heap
Adds Salesforce Agentforce integration (GA) allowing end-to-end tracing with configurable login domain (production, sandbox, or My Domain) and updated Builder schema
Adds Llama Prompt Guardprompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. guardrail, English/Portuguese toxicity guardrails, and Brazilian PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. recognizers (CPF, CNPJ, CEP, phone)
Adds new platform tests: Bias, Contains PHI, and Unauthorized tool call
+14 moreshow less
Adds workspace-level and per-project PII redaction in traces with configurable entity types
Adds universal search across projects, sessions, users, and tests from one search bar
Adds customizable project dashboards with pin-able widgets, inline notifications, and a sidebar notification center
Adds Delete records in monitoring mode via API
Adds Retrieve sessions linked to a test result via API
Adds dateUpdated filter on the List Tests API
Adds BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. data source support for datasets without a timestamp column
Adds workspace settings to restrict workspace creation to deployment admins and prevent users from given domains from creating workspaces
Adds domain verification on the workspace settings page
Adds built-in governance frameworks: EU AI ActEU AI ActEU regulation that classifies AI systems by risk level and imposes compliance obligations—documentation, transparency, human oversight—on developers and deployers, shaping how AI-based cyber tools are built and sold in Europe., TRAIGA, E23 MRM, and Openlayer Governance Framework
Adds audit trails with full workspace activity log and export
Adds session-level aggregated metrics for cost, latency, and token counts
Adds LLM cost configuration to view and edit per-model pricing for cost calculations
Adds ability to view, edit, and download custom-metric parameter bundles from the UI
VRM May 2026 adds automated workflows (patterns), MPT issue details, Apps CSV export, and Assets IP view.
Adds Patterns to VRM settings for automated workflows: assign assets to applications, assign labels to assets, create tickets from issues, or update issue status
Adds Details fields (Severity, Exploit, Remediation, Location) to Manual Penetration Testing (MPT) issues in the VRM UI
Allows exporting the Applications table with custom filters as a CSV file via the VRM console
Enables searching by Target Name in the Solutions table in the VRM console
StackHawk HawkScan 5.6.0 adds hawk config CLI surface and tighter primary-host scoping for scans.
└──▷ USE IT
Browse all configuration sections available in HawkScan 5.6.0.
shell
hawk config list
Dump the JSON envelope for a specific config section including type, default, and constraints.
shell
hawk config show <path>
Get a worked example of a config section in raw markdown format.
shell
hawk config recipe <path> --text
Adds the hawk config subcommands to expose configuration knowledge from the command line
Adds support for the --text flag on hawk config commands to output raw markdown
Improves primary-host exact match logic and scopes HARHARAn HTTP Archive file, a JSON-format log of all network requests and responses captured by a browser's developer tools, used by cyber tools to replay, inspect, or analyze web traffic without re-running a live session. uploads to the configured app.host
DeepSource adds per-subrepo OSSOSSOpen-source software: code whose licence permits anyone to inspect, modify, and redistribute it. Cyber tools build on it to reuse auditable libraries without licensing fees. vulnerability scanning, AI Review for 10 new languages, and Kubernetes Gateway API support for Enterprise Server.
Adds per-subrepository vulnerability scanning for monorepos with a dedicated Dependencies tab scoped to each sub-project's manifest or lock file.
Expands AI Review coverage to Dart, Elixir, Apex, Groovy, Objective-C, VB.NET, PowerShell, Lua, Erlang, and Perl.
Enables Kubernetes Gateway API support in Enterprise Server via Admin Console configuration.
GitLab 19.0 adds group-level Duo review instructions, Secrets Manager beta, SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. dep scanning, and webhook HMACHMACA keyed hash that proves a message came from someone holding a shared secret and was not altered. Webhooks and API request signing commonly use it. signing.
gitlab/duo/mr-review-instructions.yaml supports group-level custom review instructions for GitLab Duo
GitLab Secrets Manager is now available in open beta for Premium/Ultimate on GitLab.com and Self-Managed
Dependency scanning by using SBOM is generally available with automatic dependency resolution for Maven, Gradle, and Python
repo: syntax filters exact code search results by repository without visiting individual projects
Expanded open source model support includes Devstral 2 123B and GLM-5.1-FP8FP8Eight-bit floating-point number formats used to store model values and run model calculations with less memory. Supported hardware can process them faster, with less numeric precision. in GitLab Duo Agent Platform
+14 moreshow less
Per-session tool approvals allows approving trusted tools once for an entire session, controlled by admin settings cascading from instance to group
AI Catalog can be confined to a group hierarchy to block external agents not owned by the group
Free tier users on GitLab Self-Managed can purchase credits for GitLab Duo Agent Platform
Admin-defined network access controls allow domain denylists/allowlists for Agent Platform remote flows in Settings
Dependency scanning is available in security configuration profiles with the Dependency Scanning - Default profile
Dependency resolution for Gradle SBOM scanning automatically generates gradle.graph.txt if not present
API security testing findings include remediation guidance for checks like SQL injectionSQL injectionAn attack that makes an application treat untrusted input as part of a database command. It can expose or modify data by changing what the query does., CORSCORSA browser mechanism that lets a server declare which foreign origins may read its HTTP responses, enforced by the browser to block unauthorized cross-site requests from JavaScript., and HTML injection
Merge requests now have a Reports tab showing all findings from security scans, license compliance, and code quality
CI/CD inputs support array index operator [] to access specific elements within array inputs
Pipeline inputs in the UI allow selecting multiple values which are combined into an array (e.g., ["option1","option2"])
Component usage analytics in CI/CD Catalog shows exactly which projects use each component and their versions
Parallel pipeline limits for merge trains can be configured per project or instance-wide via settings
Default merge request title templates can be customized using variables like %{issue_id} and %{issue_title}
Secure webhooks with HMAC signing tokens uses webhook-signature header alongside webhook-id and webhook-timestamp
19 details in Everything
└──▷ BREAKING ON UPGRADE
!Minimum supported PostgreSQL version is now 17; upgrade before installing GitLab 19.0
!Linux packages for Ubuntu 20.04 are no longer provided; migrate to Ubuntu 22.04 or another supported OS
!Support for Redis 6 is removed in GitLab 19.0; migrate to Redis 7.2 or Valkey 7.2
!Bundled Mattermost is removed from the Linux package in GitLab 19.0; refer to migration instructions if used
!Linux package support for SUSE distributions ends in GitLab 19.0; migrate to Docker deployment
!Spamcheck is removed from the Linux package and GitLab Helm chart in GitLab 19.0; deploy separately using Docker if needed
!Gateway API with Envoy Gateway replaces NGINX Ingress as the default networking configuration in the Helm chart until removal in GitLab 20.0
!Bundled Bitnami PostgreSQL, Bitnami Redis, and MinIO charts are removed from the Helm chart and Operator; configure external services before upgrading
Phoenix Security correlates scanner, cloud and runtime findings with exploitability and ownership, and uses AI agents to prioritise and open remediation pull requests.
Phoenix Security adds Lifecycle Configurations for automated asset/finding purging and Delta import support via REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services..
└──▷ HOW TO FIND IT
Configure asset lifecycle grace periods via the web UI.
Akto discovers APIs, MCP servers and AI agents, tests and red-teams them, and enforces runtime guardrails and posture management.
Akto adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface./Endpoint Shield integration, OpenCode/Hermes hooks, GitOpsGitOpsA practice where Git repositories serve as the single source of truth for infrastructure and application state, with automated systems continuously reconciling live environments to match what is declared in version control. sync, Snowflake tracing, and multi-LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. Agent Guard. new
Endpoint Shield badge flags personal/non-corporate accounts on Asset page
Endpoint Shield badge flags AI agents with access to local stdio MCP servers
File Inspection feature allows configuring file paths from the dashboard for protected devices
Flagged Payload highlights exact response payload triggering a violation in guardrail activity
+10 moreshow less
Multi-LLM Agent Guard runs scanning across multiple LLM providers and model configurations
Domain-Based Proxy Routing routes AI domains through proxy while chatty domains bypass it
OpenCode Hook intercepts prompts and tool request/response traffic
Hermes Agent Hook monitors workflows and enforces guardrails inline
MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. Deployment via Automox, Microsoft Intune, Jamf, Kandji, NinjaOne
GitOps Policy Sync syncs policies from repository using GitHub Workflows
Jobs Information in Settings tracks background jobs and connector execution errors
Snowflake Agent Tracing captures traces, spans, and service graphs for agent traffic
Copilot Studio Bot Filtering allows filtering by Bot ID under Argus Connectors
Custom Auth Headers added to Bring Your Own AI Agent setup under Argus Connectors
Levo adds Streamable HTTPStreamable HTTPAn MCP transport protocol that lets a client send JSON-RPC requests over HTTP POST while the server streams responses back using Server-Sent Events, replacing the older stdio and SSE transports for remote tool communication. to its MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server and a redesigned Policy Hub with identity-aware policies for agent attribution.
Adds Streamable HTTP transport support for the Levo MCP server
Redesigned Policy Hub now supports identity-aware policies to tie traffic tags to specific agents and sessions
Fastly Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. gains a new Traefik plugin integration for intercepting and inspecting HTTP traffic.
3 more releases in this issue
· 2026-05-05 → 2026-05-29
Fastly Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. now protects traffic routed through Envoy Gateway
Fastly Next-Gen WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. adds Google Cloud Service Extensions integration for real-time inspection in GCLB.
Integrates Fastly Next-Gen WAF with Google Cloud Load Balancers via Google Cloud Service Extensions to enable real-time inspection and enforcement within the load balancer's request processing pipeline.
Operates as a callout backend service using gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. and Envoy's external processing protocol to inspect request headers, request bodies, and response headers.
Wallarm adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Protection to discover, monitor, and control externally exposed Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers.
Adds MCP Protection feature to Wallarm Advanced API Security for discovering exposed MCP servers, tools, and resources
Enables correlation of MCP and user sessions for full activity visibility
Allows enforcement of granular access and schema-based controls for MCP tool usage
3 details in Everything
1 more release in this issue
· 2026-05-05 → 2026-05-12
fcaptcha v1.10.0 adds FCAPTCHA_CLIENT_PATH to serve the widget bundle from the Go server and improves replay-protection stores.
└──▷ GET THIS VERSION
$ git clone --branch v1.10.0 https://github.com/webdecoy/fcaptcha.git
# already have the repo? check out this version:$ git checkout v1.10.0
server-go now serves the client/fcaptcha.js widget bundle from the same origin by resolving a real client path at startup using the FCAPTCHA_CLIENT_PATH environment variable or a probe list, ending the 404 errors returned when referencing the non-existent ./static/fcaptcha.js path.
Replay-protection stores (PoWChallengeStore.usedSolutions and TokenStore.usedTokens) are now bounded by LRU + TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit. (cap 100K entries, 10 min TTL) using hashicorp/golang-lru/v2, replacing the previous wholesale wipe at 10K entries and O(n) inline cleanup.
New server-go methods IsSolutionUsed, MarkSolutionUsed, and DeleteChallenge are now mutex-protected with atomic test-and-set logic to prevent data races in PoW verification.
BunkerWeb 1.6.10 adds per-backend HTTP version control, cross-subdomain session sharing, modern TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. installer, and new UI bulk-action controls.
└──▷ GET THIS VERSION
$ git clone --branch v1.6.10 https://github.com/bunkerity/bunkerweb.git
# already have the repo? check out this version:$ git checkout v1.6.10
└──▷ USE IT
Route a specific backend over HTTP/2 while keeping other upstreams on HTTP/1.1 — useful for gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. or h2-capable origin servers.
Share antibot challenge state across subdomains so users aren't re-challenged when moving between app.example.com and api.example.com.
yaml
SESSIONS_DOMAIN=.example.com
Run the installer with the modern TUI prompts and pre-specify the server IP to skip the interactive IP selection menu.
$ sudo ./install.sh --tui--server-ip 203.0.113.42
Adds MAX_HEADERS setting (default 100) to cap the number of request header lines accepted.
Adds per-backend REVERSE_PROXY_HTTP_VERSION supporting 1.0, 1.1, and 2, overriding the global default per upstream.
Adds SESSIONS_DOMAIN multisite setting to share antibot/challenge session state across sibling subdomains.
Adds Web UI session lifecycle controls: SESSION_LIFETIME_HOURS (sliding idle TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit.), SESSION_ABSOLUTE_HOURS (hard cap), and SESSION_ROLLING_HOURS (periodic session ID regeneration).
Adds LETS_ENCRYPT_MAX_LOG_BACKUPS (default 50) to cap certbot log rotation.
+10 moreshow less
Adds modern inline TUI installer prompts via gum, with fallback to whiptail then plain read; controlled by --tui, --no-tui, and BW_INSTALL_TUI.
Adds --server-ip <IP> flag and SERVER_IP_INPUT to the installer; interactive installs present a menu when multiple IPv4s are detected.
Supports k/m shorthand suffixes for metrics and datastore size settings, plus g/G for shared memory size settings.
Allows custom uppercase HTTP methods containing underscores and dashes in ALLOWED_METHODS.
Updates default Permissions-PolicyPermissions-PolicyAn HTTP response header that lets a server declare which browser features—camera, geolocation, microphone—are allowed or blocked for a page and its iframes, replacing the older Feature-Policy header. header to include local-network, local-network-access, and loopback-network directives.
Adds 18 missing single-column database indexes, improving query performance for large deployments.
Adds opt-in Select all N matching banner in UI list pages for bulk actions across pages.
Adds import/export for custom configurations in the UI, including optional .zip bundles attached to service exports.
CSV/Excel exports on Reports and Bans pages now include every column and honor active search and SearchPanes filters.
Bundled ui and api templates now enable REVERSE_PROXY_KEEPALIVE=yes by default.
Arcjet introduces prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. detection using hosted LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. via Open Inference Protocol v2
Adds a new prompt-injection-detect model-backed building block for identifying jailbreak attempts and adversarial inputs.
Implements the Open Inference Protocol v2 (KServe v2) as the standard API contract between Python model services and the Go decision service.
Guided onboarding flow based on use cases like PCIPCIA hardware bus standard that connects peripheral devices to a computer's motherboard; cyber tools targeting hardware-level forensics or memory analysis use it to access device registers and DMA regions directly. compliance or fraud prevention.
Socket Surface now displays Chrome Web Store active-user counts on extension package pages, separating them from download metrics to aid popularity evaluation.
Aguara v0.21.0 adds signed advisory bundles, --fresh verification, and --allow-stale safety for trusted intel.
└──▷ GET THIS VERSION
$ git clone --branch v0.21.0 https://github.com/garagon/aguara.git
# already have the repo? check out this version:$ git checkout v0.21.0
└──▷ USE IT
Refresh local threat intel using the new signed bundle mechanism to ensure provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build..
shell
aguara update
Run checks in CI with fresh, verified intel, failing fast if verification or fetch fails.
shell
aguara check . --fresh --ci
aguara update, aguara check --fresh, and aguara audit --fresh now fetch a signed advisory bundle, verify its Sigstore signature and publisher identity, and validate the manifest before caching or using it.
Adds --allow-stale fallback logic that reuses the local cache only when a provenance marker is present and matches the current snapshot, preventing silent use of unverified data on refresh failure.
Adds --insecure-intel flag (requires AGUARA_INSECURE_INTEL=1) to skip signature/identity checks while retaining digest verification for air-gapped or test environments.
3 details in Everything
5 more releases in this issue
· 2026-05-13 → 2026-05-29
Aguara v0.17.0 expands offline malicious-package checks to npm, PyPI, Go, Rust, PHP, Ruby, Java/Maven/Gradle, and .NET/NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code. with aguara check --ecosystem.
└──▷ GET THIS VERSION
$ git clone --branch v0.17.0 https://github.com/garagon/aguara.git
# already have the repo? check out this version:$ git checkout v0.17.0
aguara check now supports the --ecosystem flag to constrain analysis to specific dependency surfaces (e.g. go,ruby, maven, nuget).
Added support for offline malicious-package detection across eight ecosystems: npm, PyPI, Go, Rust/Crates.io, PHP/Composer, Ruby/Bundler, Java/Maven/Gradle, and .NET/NuGet.
Aguara v0.16.2 extends redaction to non-credential findings with new Sensitive field and YAML opt-in
└──▷ GET THIS VERSION
$ git clone --branch v0.16.2 https://github.com/garagon/aguara.git
# already have the repo? check out this version:$ git checkout v0.16.2
New optional sensitive boolean field on types.Finding, emitted as "sensitive": true in JSON output for findings that triggered sensitivity-based redaction.
Library API method renamed from types.RedactCredentialFindings to RedactSensitiveFindings, with the old name retained only as a deprecated alias for backward compatibility.
Aguara v0.16 adds offline compromised-package detection via aguara check, the new aguara audit command, and a local cache refresh via aguara update.
└──▷ GET THIS VERSION
$ git clone --branch v0.16.0 https://github.com/garagon/aguara.git
# already have the repo? check out this version:$ git checkout v0.16.0
└──▷ TRY IT
Run a CI-compatible check for compromised packages in your current directory.
$ aguara check --ci
Adds the aguara check subcommand to auto-detect ecosystems and scan for compromised packages in node_modules or Python dependencies using an embedded threat intelligence dataset.
Adds the --ci flag to aguara check to return exit code 1 on critical findings with clean logs suitable for CI pipelines.
Adds the aguara audit --ci subcommand to run both content scans (prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools., credential leaks, etc.) and package checks in a single invocation with a unified JSON output via --format json.
Adds the aguara update subcommand to manually refresh the local offline threat intelligence cache from OSV.devOSV.devAn open-source vulnerability database and API maintained by Google that aggregates CVEs and ecosystem-specific advisories in a unified schema, giving cyber tools a single feed to query for package-level vulnerability data. without rebuilding the binary.
Adds the aguara status subcommand to display the embedded snapshot date, record count, and existence of a local cached refresh.
Adds offline Docker benchmark harness, npm ecosystem support for check, and JS/SUPPLY detection rules.
└──▷ GET THIS VERSION
$ git clone --branch v0.15.0 https://github.com/garagon/aguara.git
# already have the repo? check out this version:$ git checkout v0.15.0
feat(ci): new trust-chain analyzer for GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure. workflows
npm package metadata analyzer (feat(pkgmeta))
JavaScript payload risk analyzer (feat(jsrisk))
New supply-chain rules: SUPPLY_022/023/024/025 (OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user., runner pivot, session exfil, agent persistence)
Nexus Repository Cloud adds dynamic upstream service discovery for Terraform proxy repositories.
Terraform proxy repositories now dynamically detect upstream service discovery paths, improving compatibility with compliant registries such as OpenTofu registries and registry.coder.com
1 detail in Everything
4 more releases in this issue
· 2026-05-07 → 2026-05-27
Nexus Repository Cloud adds Alpine APK support, dynamic Terraform proxy discovery, immediate session invalidation on password change, and UUIDUUIDA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide. v4 API keys.
Adds steps for Alpine Linux (APK) repository support (hosted, proxy, group types) with APKINDEX generation and RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it.-based index signing
Terraform proxy repositories now dynamically read service discovery paths from upstream registries
Password change immediately invalidates all active sessions across devices and browsers
API keys for NuGetNuGetMicrosoft's package manager for .NET, hosting a public registry of reusable libraries so tools can pull in dependencies without bundling or manually maintaining third-party code., npm, Docker, and Conan formats now use UUID v4 generation
Nexus Repository Cloud adds GO/Ansible repo support, new User Token API parameter, and uploader metadata permission.
Adds nameCode parameter to the User Token API to identify a token's owner and authentication realm by token name code
Adds a new nexus:uploader-metadata:read permission to control access to asset uploader usernames and IP addresses in the REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. and browse UI
Added support for GO hosted and group repositories
Added support for Ansible proxy, hosted, and group repositories
New IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. API endpoints for programmatic role management; IP Allow List GA; H2 source support in Instance Migrator
Added new Security management user roles API endpoints (get, replace, add, remove) to allow administrators to programmatically manage user role assignments in cloud deployments
The IP Allow List feature is now generally available in Sonatype Nexus Repository Pro and Cloud editions
The Instance Migrator now supports H2 databases as a migration source
Nexus Repository 3.92.0 adds Nexus One UI toggle, Dart/Flutter/Conda/Helm repo support, SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. API, and Firewall webhooks.
Adds Settings > System > Nexus One UI toggle to preview the redesigned user interface
Adds Pub repository type for Dart and Flutter package management
Adds hosted and group repository support for Conda packages
Adds Helm group repository support for exposing multiple Helm repos via a single URL
Updates Instance Migrator to support migrating Swift, Terraform, and Conda hosted repositories
+5 moreshow less
Exposes HikariCP database connection pool metrics via the Service Metrics Data API
Enables SSRF protection by default for new installations and adds an administrative API endpoint for managing it
Retains daily storage metrics indefinitely in the Usage Insights dashboard
Adds webhook support for Sonatype Repository Firewall events
Adds Bulk Waivers capability and associated API for managing quarantined components
Dependency Track v4.14.2 adds project filters to component identity search and improves vuln data mirroring performance.
└──▷ GET THIS VERSION
$ git clone --branch 4.14.2 https://github.com/DependencyTrack/dependency-track.git
# already have the repo? check out this version:$ git checkout 4.14.2
Add project filters to component identity search allows scoping the search results by specific projects.
v26.2.0 adds EU CRAEU CRAEU Cyber Resilience Act, a European Union regulation requiring manufacturers and publishers of products with digital elements to meet mandatory cybersecurity standards before selling into the EU market. compliance wizard, Component Lifecycle Events API, SBOM signature endpoints, and CycloneDX 1.7CycloneDX 1.7An OWASP-maintained Software Bill of Materials standard and schema; version 1.7 adds attestations and evidence fields, giving cyber tools a richer, machine-readable format for expressing supply-chain trust claims./SPDX 3SPDX 3An open standard from the Linux Foundation for expressing software bill-of-materials data, letting cyber tools exchange dependency, license, and vulnerability metadata in a machine-readable, interoperable format..0.1 support
└──▷ GET THIS VERSION
$ git clone --branch v26.2.0 https://github.com/sbomify/sbomify.git
# already have the repo? check out this version:$ git checkout v26.2.0
Adds CRA Compliance Wizard with scope screening, BSI guidance, EN 18031 opt-in, and public Declaration of Conformity page
Adds /api/v1/cle/TEATEATiny Encryption Algorithm, a symmetric block cipher designed by Wheeler and Needham in 1994, valued for its minimal code footprint and simplicity, making it attractive for embedded or constrained environments. CLE endpoint for multi-level Component Lifecycle Events management
Adds upload/download API endpoints for SBOM signatures and provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build. attestations
Apiiro maps an application's architecture and risk graph and runs AI-SAST, SCA, secrets, API and threat-modeling checks on AI- and human-written code.
Apiiro GA adds category-level role permissions with auto-updating sub-permissions and default read access.
Adds category-level control to roles for Risk, Inventory Management, User Management, Reports, and Governance, removing manual sub-permission configuration.
Adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server detection, runtime repeater indicators, task duration limits, and Anthropic/OpenAI-compatible STAR inference.
The crawler now detects MCP servers, extracting tools, resources, and prompts as separate entrypoints visible in a new MCP server name column with filter support
Adds runtime indicators to the Repeater selector and settings page showing queued, running, and scheduled execution counts
Allows filtering and searching repeaters by connectivity and workload in the Repeater selector and settings page
Shows the number of projects connected to each repeater in the Repeater settings page alongside new filtering and searching options
Supports using Anthropic inference for STAR agents
+2 moreshow less
Supports any OpenAI-compatible endpoint (such as Azure or self-hosted inference) for STAR
Improves STAR agents' ability to understand connectivity between affected code and entry points in Go applications
7 details in Everything
└──▷ BREAKING ON UPGRADE
!The GET /api/v1/scans/:scanId/issues endpoint is limited to a maximum of 100 issues per request on July 7, 2026; migration to the paginated GET /api/v2/scans/:scanId/issues endpoint is required for full dataset retrieval.
Dalfox is an XSS scanner that automates parameter analysis, reflected/stored/DOM-based XSS detection, and WAF fingerprinting for web apps.
Dalfox v3 rewrites in Rust with ASTASTAn abstract syntax tree, a structured representation of parsed code. Tools inspect or transform this tree to understand expressions and statements rather than just matching text.-based JS analysis, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server, async REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services., SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface. output, and new scan-control flags.
└──▷ GET THIS VERSION
$ git clone --branch v3.0.0 https://github.com/hahwul/dalfox.git
# already have the repo? check out this version:$ git checkout v3.0.0
└──▷ TRY IT
Output findings in SARIF format to integrate directly with GitHub Code Scanning in CI.
New AST-based JS analysis via oxc replaces headless browsers for fast, accurate DOM-XSSDOM-XSSA cross-site scripting vulnerability where malicious JavaScript executes entirely in the browser by manipulating the DOM, never touching the server, making it invisible to server-side input filters. detection.
New dalfox mcp subcommand launches an MCP stdio server to expose Dalfox scanning tools to AI coding assistants.
Async REST API server rebuilt on axum with job queueing, real-time cancellation, and webhook notifications.
Per-target progress bars replace spinners; banners are automatically suppressed in silent or machine-readable modes.
9 details in Everything
└──▷ BREAKING ON UPGRADE
!Complete rewrite in Rust — the Go implementation moves to the v2 branch; the v3 binary is a different runtime.
!The --found-action, --grep, --report, and --max-cpu flags are removed with no direct replacements.
!The Chromium/chromedp headless browser engine and all headless-related CLI flags are removed.
!Non-XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. (BAV) vulnerability checkers are removed; Dalfox v3 is strictly an XSS scanner.
!The --cookie-from-raw flag is excluded from the MCP tool interface (sandbox restriction).
1 more release in this issue
· 2026-05-07 → 2026-05-25
Dalfox v2.13.0 adds out-of-scope filtering, early-stop mode, JSON body XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. testing, and 10 new secret-pattern regexes.
└──▷ GET THIS VERSION
$ git clone --branch v2.13.0 https://github.com/hahwul/dalfox.git
# already have the repo? check out this version:$ git checkout v2.13.0
Adds --out-of-scope domain filtering to exclude irrelevant domains from scans.
Adds early-stop scan mode to halt on first result, with result-type filtering.
Adds JSON body parameter testing for XSS, enabling coverage of API endpoints that accept JSON payloads.
Expands secret-pattern grep ruleset with 10 new providers: Sentry, Netlify, Firebase, GitLab, SendGrid, Dropbox, Asana, DigitalOcean, Linear, and Shopify.
Hardens REST/MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server mode by stripping CLI-only options (filesystem and shell fields) at the API boundary, closing one Critical and three High-severity advisories.
Juice Shop v20 adds AI/LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. injection challenges, guest basket support, new themes, Prometheus LLM metrics, and a ~30% faster startup.
└──▷ GET THIS VERSION
$ git clone --branch v20.0.0 https://github.com/juice-shop/juice-shop.git
# already have the repo? check out this version:$ git checkout v20.0.0
└──▷ HOW TO FIND IT
Enable the new AI challenges by pointing Juice Shop at your LLM/AI endpoint so prompt-injectionprompt-injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools. scenarios become available in CTFCTFCapture The Flag — a competitive hacking challenge format where participants exploit intentionally vulnerable systems or puzzles to retrieve hidden strings, used by cyber tools to practice and demonstrate offensive and defensive techniques. or training sessions.
📍See https://howto-llm.owasp-juice.shop/ to configure your LLM endpoint, then start Juice Shop normally — the three AI challenges will appear automatically once the endpoint is reachable.
Adds three new AI/LLM challenges — Chatbot Prompt Injection (), Greedy Chatbot Manipulation (), and AI Debugging () — requiring a configured LLM/AI endpoint.
Adds Prometheus metrics to track LLM token usage and tool calls (requires LLM endpoint support).
New guest basket support lets anonymous users add items and merge their basket on login.
Introduces two new UI themes: neon-fire (now the default for CTF configuration) and lime-green.
Redesigned Coding Challenge view as a standalone page with improved flow and modern code highlighters.
+5 moreshow less
Changed product overview to a compact grid layout; applies enhanced grid view and blur effect to the photo wall as well.
Optimized startup time by ~30% via lazy-loading and batched startup database inserts.
Adds strict enum validation for configuration options including codingChallengesEnabled, hintPlaybackSpeed, and showCountryDetailsInNotifications.
Cheat detection now treats direct access to tracking pixels as guaranteed cheating, and loosely coupled challenges no longer trigger cheat scoring based on timing.
Docker container image reduced to its smallest size since Juice Shop v8.
10 details in Everything
└──▷ BREAKING ON UPGRADE
!Node.js 20.x is no longer supported; upgrade to a newer supported Node.js version before upgrading.
!The NLP-based chatbot and its challenges Bully Chatbot and Kill Chatbot have been removed, breaking CTF setups or solution guides that rely on them.
!Challenges Mint the Honeypot and Wallet Depletion now require an ALCHEMY_API_KEY environment variable to function.
!The Internet Traffic challenge tag has been renamed to External Dependency, which may break customization files or CTF setups referencing the old tag name.
Wapiti 3.3.0 adds JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. auth option, Printer module, sequential crawlers, and modern CMSCMSA web content management system for creating and managing digital content without writing code directly; cyber tools use CMS platforms to host documentation, portals, or reporting dashboards quickly. detection
└──▷ GET THIS VERSION
$ git clone --branch 3.3.0 https://github.com/wapiti-scanner/wapiti.git
# already have the repo? check out this version:$ git checkout 3.3.0
Introduces the Printer module to Wapiti's attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources.
Enables running both crawlers sequentially via new configuration
Adds detection patterns for modern frameworks and ORMs in the CMS module
Adds support for XHTML and XML content types in XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. detection
Invicti adds multi-credential HTTP auth per target, SCIM2SCIM2An IETF-standardized REST/JSON protocol for automating user and group provisioning across identity systems, letting cyber tools sync accounts and permissions without custom per-service integrations. toggle per org, business criticality filter, and support access for admins
HTTP authentication credentials multiple entries per target with URL routing for different site sections.
SCIM2 provisioning toggle per organization in Ultimate license settings.
Support access request capability added to Administrator role (no longer restricted to account owners).
New Business Criticality filter and Business Impact column in the DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. vulnerabilities list view.
4 details in Everything
3 more releases in this issue
· 2026-05-14 → 2026-05-28
Invicti adds multi-credential HTTP auth per target, SCIM2SCIM2An IETF-standardized REST/JSON protocol for automating user and group provisioning across identity systems, letting cyber tools sync accounts and permissions without custom per-service integrations. toggle per org, business criticality filter, and consolidated API auth settings
└──▷ HOW TO FIND IT
When scanning a complex app where login, admin, and API sections each require different HTTP auth credentials, configure multiple entries in the target settings to ensure full coverage.
📍In the Invicti UI, open the Target Configuration screen. Under HTTP Authentication Credentials, add multiple entries, ensuring each has a distinct URL for correct routing during scans.
For Ultimate license admins wanting to prevent accidental user/team deletions via SCIM2, disable the provisioning endpoint for the organization.
📍Navigate to Organization Settings › Identity Management. Toggle SCIM2 Provisioning off for this organization.
Filter the vulnerabilities dashboard to show only high-priority issues from business-critical assets.
📍Go to DAST › Vulnerabilities. In the filter sidebar, select Business Criticality and choose the desired level (e.g., Critical).
Allows configuring multiple HTTP authentication credentials per target to support web apps with different auth sections
Adds a Business Criticality filter and Business Impact column in the DASTDASTDynamic application security testing, probing a running application from the outside for vulnerabilities. It checks behavior exposed through the application's interfaces. vulnerabilities list to focus on high-value targets
Consolidates API target authentication settings (including IDORIDORInsecure Direct Object Reference, a web vulnerability where an application exposes internal identifiers (IDs, filenames) without access checks, letting an attacker substitute another user's ID to reach their data./BOLABOLABroken Object Level Authorization, an API vulnerability class where a server fails to verify that the requesting user owns or may access the object ID they supply, letting attackers read or modify other users' data.) into the API Target Authentication configuration area, removing them from the API Catalog
Enables or disables SCIM2 provisioning endpoints per organization for Ultimate license customers
Allows administrators to request support access directly without requiring an account owner
Invicti adds isolated Workspaces, AI crawl prediction, and cross-credential Secrets Manager support in release 20260514
└──▷ HOW TO FIND IT
Configure a target to use Secrets Manager for all credential fields instead of just simple form auth.
📍Reference Secrets Manager credentials in every field when configuring a Target
Download debug logs for a failed scan to troubleshoot the issue.
📍Select the failed scan and choose Download logs for failed scans
Organize teams into isolated, self-managed environments within your organization.
📍Create a new Workspace via the Workspaces management interface
Adds Workspaces to create isolated, self-managed environments for teams, projects, or independent organization
AI-enhanced crawl path prediction expands scan coverage on modern web apps and APIs by predicting likely new paths and endpoints
Secrets Manager credentials can now be referenced in every credential field when configuring a Target, not just simple form authentication
Login Sequence Recorder (LSR) and Business Logic Recorder (BLR) sessions can now be recorded for Targets assigned to an internal scanning agent
Scan schedules now support deleting the scans they created upon schedule deletion via Delete scans created by a schedule
+7 moreshow less
Debug logs for failed scans are now downloadable, previously limited to successful ones
OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 report is now available on all licenses, including Essentials
Persistent vulnerabilities view remembers grouped or ungrouped state across page loads
Import file limit per Target increased from 5 to 10 files
Invicti AI Assistant, including the Get help feature, is now available to all users in the account
APIs discovered by a scan are linked back to that scan from the API catalog for endpoint traceability
Auditing for Target configuration changes now captures previous and new values for business criticality, authentication, scan configuration, agent settings, excluded hours, IAST settings, name, and tags
Invicti adds isolated workspaces, AI crawl path prediction, LSR/BLR for internal agents, and more.
Adds Workspaces to create isolated, self-managed environments for teams, projects, or scopes within an organization.
AI-enhanced crawl path prediction expands scan coverage on modern web apps and APIs by predicting likely new paths.
Enables Login Sequence Recorder (LSR) and Business Logic Recorder (BLR) sessions for Targets assigned to internal scanning agents.
Allows Secrets Manager credentials to be referenced in every credential field when configuring a Target, not just simple form authentication.
OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. Top 10 report is now available on all licenses, including Essentials.
+6 moreshow less
Scan progress indicator uses a more accurate algorithm for clearer status views and better ETAs.
Vulnerabilities page persists the last viewed grouped or ungrouped layout across sessions.
Increases import file limit to up to 10 files per Target, up from 5.
Invicti AI Assistant, including Get help, is now available to all users in the account.
APIs discovered by a scan are linked back to that scan from the API catalog for traceability.
Improved auditing captures previous and new values for Target configuration changes (business criticality, authentication, etc.).
WPScan 4.0 adds authenticated enumeration, SARIFSARIFStatic Analysis Results Interchange Format, a standard for sharing code-analysis findings, including locations and rule details. It lets scanners report results to a common review interface./JSONLJSONLA text format where each line is a self-contained, valid JSON object, making it easy to stream, append, and process large datasets line by line without parsing a full JSON array into memory. output, SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. support, backup-folder scanning, and PoC vuln data.
└──▷ GET THIS VERSION
$ git clone --branch v4.0.0 https://github.com/wpscanteam/wpscan.git
# already have the repo? check out this version:$ git checkout v4.0.0
└──▷ TRY IT
Pipe streaming results into a log file and a live processor simultaneously without waiting for the scan to finish.
$ wpscan --url https://example.com -e ap --format jsonl | tee scan.jsonl | jq .
Output SARIF for direct ingestion by GitHub Code Scanning or other SARIF-aware CI tooling.
Adds --wp-auth option for WordPress Application Password authentication, enabling authoritative plugin/theme inventory via authenticated enumeration.
Adds --format sarif output format for direct CI/CD pipeline integration.
Adds --format jsonl streaming output format for real-time, line-by-line results consumption.
Adds --expect-saml flag to support SAML-protected WordPress targets.
Adds backup folder enumeration via -e backup-folders (alias -e bf).
+11 moreshow less
Adds --exclude-vulns option to filter out specific vulnerabilities by UUIDUUIDA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide. from scan output.
Adds --wordlist-skip N option to resume interrupted brute-force attacks at a specific wordlist offset.
Adds --max-retries N option for automatic retry of failed brute-force requests.
Adds --follow-redirect option to automatically follow HTTP redirects during scanning.
Adds --proxy-target-only option to route only target traffic through the proxy, leaving other requests direct.
Displays Proof-of-Concept information alongside vulnerability findings in scan output.
Shows active install counts and last-updated dates for detected plugins and themes sourced from WordPress.org API.
Includes audit metadata (command line and hostname) in scan output for traceability.
Streams plugin, theme, and user results to output in real-time as they are discovered.
Adds detection support for the SearchWP premium plugin via a new dynamic finder.
HTTP status code tracking now warns when excessive errors are detected during a scan.
16 details in Everything
└──▷ BREAKING ON UPGRADE
!Ruby 3.0, 3.1, and 3.2 are no longer supported; Ruby 3.3+ is now required.
!Plugin and config-backup enumeration is no longer performed by default; explicit -e ap (or other -e flags) must be passed to scan plugins.
!The --timthumbs-detection, --config-backups-detection, --db-exports-detection, and --medias-detection options have been removed.
!New installations use XDGXDGA set of specifications maintained by freedesktop.org that standardise where Linux applications store config, data, and cache files, letting tools respect user-defined paths instead of hardcoding locations. Base Directory paths (~/.cache/wpscan/db and ~/.config/wpscan/) instead of ~/.wpscan/.
!--plugins-list and --themes-list now override -e options rather than combining with them.
Infisical v0.160.8 adds enforceIdentityLimit flag, post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA.ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code. signing, environment soft delete, and blind indexes for secret values
└──▷ GET THIS VERSION
$ git clone --branch v0.160.8 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.160.8
enforceIdentityLimit flag enforces identity limits regardless of plan
Support for DigiCert revocation status in PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. workflows
Post-quantum ML-DSA signing algorithms added to KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves.
Soft delete capability for environments introduced
Blind index support added for secret values enabling new search patterns
+2 moreshow less
External emails now included on audit log for secret-share actions
Machine identities from both org and project displayed at org level
7 details in Everything
10 more releases in this issue
· 2026-05-07 → 2026-05-29
mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. for LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory., certificate auth for Azure Key Vault, resource identity for relays, and more
└──▷ GET THIS VERSION
$ git clone --branch v0.160.5 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.160.5
Add mutual TLSmutual TLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. (mTLS) client certificate support for LDAP.
Add certificate authentication for Azure Key Vault in app connections.
Add resource identity authentication for relays.
Allow importing a certificate without a private key or chain.
Adds Milvus dynamic-secret support, PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. wildcard DNS in ACMEACMEAn IETF-standard protocol (RFC 8555) for automating TLS certificate issuance and renewal, letting cyber tools manage certificates without manual CA interaction., and permission audits for machine identities.
└──▷ GET THIS VERSION
$ git clone --branch v0.160.4 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.160.4
milvus is a new dynamic-secret provider, enabling Infisical to rotate credentials for Milvus databases
PKI certificates generated via ACME can now use * wildcards in DNS identifiers (e.g., *.example.com)
A permission audit log is now emitted for project machine identity actions, allowing tracking of who modified which identity's permissions
New PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. features: browser-based RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. client with session recording and secret duplication support
└──▷ GET THIS VERSION
$ git clone --branch v0.160.1 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.160.1
feat(pam): Adds a browser-based RDP client with session recording and playback capabilities for privileged access managementprivileged access managementBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded..
feat(pam): Introduces bypass approvals feature, allowing specific PAM access requests to skip the standard approval workflow.
feat(secrets): Enables direct duplication of secrets between environments via a new API endpoint or UI action.
PKIPKIA framework of policies, roles, and cryptographic standards for issuing and managing digital certificates that bind public keys to identities, letting tools verify authenticity and encrypt communications without pre-shared secrets. applications and org overview tiles in v0.160.0
└──▷ GET THIS VERSION
$ git clone --branch v0.160.0 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.160.0
Adds PKI applications to manage certificate identities within PKI workflows
Adds organization-level overview product category tiles and a navbar type selector
Adds Oracle PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. support, Valkey-backed dynamic secrets, distributed cron jobs, RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. replay player, and honey token audit logs.
└──▷ GET THIS VERSION
$ git clone --branch v0.159.29 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.29
feat(pam): add Oracle DB access support
feat(dynamic-secrets): added memory db (valkey) support
feat(backend): add distributed cron job system with Redis-backed scheduling
feat(secret-rotation): add rotation for datadog service account
feat(gateway): add enrollment flow support to Helm chart and re-add Kubernetes docs
Adds RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. access for Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. domain accounts in PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. and export/cell scroll to PostgreSQL web access.
└──▷ GET THIS VERSION
$ git clone --branch v0.159.27 https://github.com/Infisical/infisical.git
# already have the repo? check out this version:$ git checkout v0.159.27
Adds RDP access support for Active Directory domain accounts in the privileged access managementprivileged access managementBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. (PAM) module
Adds export functionality and cell scroll capability to the PostgreSQL web database access interface
SOPS v3.13.0 adds GCP KMSKMSA managed service that creates, stores, rotates and controls access to encryption keys, usually backed by HSMs. Applications ask it to encrypt or decrypt rather than holding keys themselves. endpoint/universe env vars, Age multi-key env support, HC Vault URL allowlist, and YAML inline comment preservation.
└──▷ GET THIS VERSION
$ git clone --branch v3.13.0 https://github.com/mozilla/sops.git
# already have the repo? check out this version:$ git checkout v3.13.0
└──▷ TRY IT
Point SOPS at a private or sovereign GCP KMS endpoint (e.g., a VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware.-SC-restricted or gov-cloud endpoint) without modifying your .sops.yaml.
Supports customizable successRanges and rotatedRanges in custom detectors, giving control over which HTTP response codes indicate a valid or rotated secret.
Deduplicates concurrent credential verification requests via singleflight, reducing redundant outbound calls when the same secret is seen in parallel.
Adds default Content-Type: application/json header to custom detector verification requests.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The AnalysisInfo field on detectors.Result is renamed to SecretParts; any custom detector or tooling that references AnalysisInfo directly will break.
Detection Engine v2.163 adds six new detectors, updates GitHub/Azure DevOps precision, and surfaces Azure OpenAI HTTP status codes
Adds sap_oauth_credentials detector to detect SAP OAuth Credentials (replacing the deprecated sap_ai_core_credentials) in cyber tooling
Adds new detectors for Aikido API OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. Credentials, Logflare Access Token, PolyAPI API Key, Apollo.io API Key, and AES Cipher Key keys in cyber tooling
Updates Azure DevOps Personal Access Token detector to improve precision and catch new formats of Azure DevOps PATsPATsA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. in cyber tooling
Updates GitHub App Token detector to improve precision and catch new formats of GitHub Server-to-server Tokens in cyber tooling
Surfaces upstream HTTP status codes on failure for Azure OpenAI API keys instead of generic invalid-secret errors via the Azure OpenAI analyzer in cyber tooling
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The sap_ai_core_credentials detector is replaced by sap_oauth_credentials; any logic dependent on the previous name will stop matching new credentials until updated.
OpenBao v2.5.4 adds PostgreSQL constraint naming for multi-instance sharing and removes legacy lease endpoints
└──▷ GET THIS VERSION
$ git clone --branch v2.5.4 https://github.com/openbao/openbao.git
# already have the repo? check out this version:$ git checkout v2.5.4
Enables PostgreSQL storage to use named constraints (table_pkey, ha_table_pkey) and indices (table_idx) when reusing the same database partition for multiple OpenBao instances
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!Legacy lease endpoints (sys/revoke, sys/renew, sys/revoke-prefix, and sys/revoke-force) are removed, stopping cross-namespace lease modification via these paths
GitGuardian 2026.5 adds advanced analytics dashboard, NHINHIA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls. governance flags, AI workspace settings, Atlassian attachment scanning, Slack capabilities, and Secrets Detection En
└──▷ HOW TO FIND IT
Enable external LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. calls and configure BYOCBYOCBring Your Own Cloud — a deployment model where the end user supplies the cloud infrastructure instead of the vendor, letting cyber tools run inside the customer's own environment for data-residency or compliance reasons. for the AI workspace via the UI.
📍Navigate to Settings → Workspace → AI in the GitGuardian self-hosted console to toggle external LLM calls and select AWS Bedrock as the provider.
Update Slack bot scopes to enable attachment scanning and redaction without reinstalling the app.
📍Add channels:history (for private channel names), im:history, and file-related scopes to the existing GitGuardian Slack app's Bot Token Scopes in the Slack App Management dashboard.
Configure log level for support bundle generation to filter Loki queries.
yaml
Add the following key to your Helm values or config:
logCollector.supportBundle.logLevel: "info"
Enables Advanced Analytics by default on Helm installations with the new Analytics Overview page aggregating Protect, Detect, Remediate, and Govern KPIs
Adds AI workspace setting for self-service enable/disable of external LLM calls and BYOC provider configuration (AWS Bedrock) at Settings → Workspace → AI
Introduces NHI admin and overprivileged flags in NHI GovernanceNHI GovernanceThe policies, controls, and lifecycle management applied to Non-Human Identities — service accounts, API keys, tokens, and certificates — to enforce least-privilege access and reduce credential sprawl across systems. to flag non-human identitiesnon-human identitiesA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls. across AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege., Microsoft Entra, and Okta with automatic severity bumping for admin breaches
Extends attachment scanning to Jira Cloud, Jira Data Center, Confluence Cloud, and Confluence Data Center (requires reinstall of Atlassian integrations for new scopes)
Adds Slack file attachment scanning, interactive thread responses (beta), and private channel name redaction by updating Bot Token Scopes in the existing Slack app
+2 moreshow less
Upgrades Secrets Detection Engine to v2.161 with 7 new detectors, 1 checker, and 5 analyzers for credentials like Payhere, HubSpot, Datadog, and GitGuardian tokens
Upgrades Secrets Detection Engine to v2.162 with 16 new detectors, 6 detector updates, and 3 analyzer updates covering Aikido, Baidu, Bitrise, Canva, Cloudflare, and other keys
7 details in Everything
└──▷ BREAKING ON UPGRADE
!Deprecated Honeytoken Labels Public API has been removed (use Custom Tags)
Timesketch Helm chart gains custom environment variable configuration and service account creation for pods.
└──▷ GET THIS VERSION
$ git clone --branch osdfir-infrastructure-2.8.8 https://github.com/google/osdfir-infrastructure.git
# already have the repo? check out this version:$ git checkout osdfir-infrastructure-2.8.8
Adds support for custom environment variable configuration for Timesketch pods in the Helm chart.
Adds service account creation support for Timesketch pods in the Helm chart.
2 details in Everything
1 more release in this issue
· 2026-05-01 → 2026-05-05
OpenRelik gains Timesketch public URL configuration; GRR Fleetspeak config moves to additional workflows.
└──▷ GET THIS VERSION
$ git clone --branch osdfir-infrastructure-2.8.7 https://github.com/google/osdfir-infrastructure.git
# already have the repo? check out this version:$ git checkout osdfir-infrastructure-2.8.7
Adds Timesketch public URL configuration to the OpenRelik Helm chart.
$ git clone --branch v2026.04 https://github.com/obsidianforensics/hindsight.git
# already have the repo? check out this version:$ git checkout v2026.04
Adds Chrome session analysis and session reconstruction, surfacing browsing session timelines in XLSX output with a dedicated Sessions tab.
Adds parsing of platform (OS-level) notifications from Chrome using ccl_chromium_reader.
Adds Knowledge Graph entity resolution and category enrichment for Chrome history artifacts.
Adds parsing of additional Chrome cookie fields (top_frame_site_key) for richer cookie artifact detail.
Adds support for the opener_visit field in Chrome history data to track referral chains between visits.
+4 moreshow less
Adds experimental support for new cache types: DawnCache, DawnWebGPUCache, and DawnGraphiteCache.
Adds an explicit Source Item column in output rows to identify where each artifact was sourced from.
Enhances Chrome IndexedDB processing for Blob artifacts.
StartAnalysisVm now accepts a machine_type parameter and supports region-level blocking operations.
└──▷ GET THIS VERSION
$ git clone --branch 20260505 https://github.com/google/cloud-forensics-utils.git
# already have the repo? check out this version:$ git checkout 20260505
└──▷ USE IT
Start a forensics analysis VM with a specific machine configuration (e.g., high-memory instance).
Chainsaw v2.16.0 adds an EVTXEVTXWindows XML-based binary log format used by the Event Log service to store system, application, and security events; cyber tools parse it to extract forensic artifacts from live systems or offline disk images. summary command for quick log overviews.
└──▷ GET THIS VERSION
$ git clone --branch v2.16.0 https://github.com/WithSecureLabs/chainsaw.git
# already have the repo? check out this version:$ git checkout v2.16.0
└──▷ TRY IT
Quickly profile the contents of a collected EVTX artefact before diving into full threat hunting.
$ chainsaw summary <path>
New summary command provides an at-a-glance summary of EVTX event log files.
Cortex Analyzers 3.8.4 adds an ANY.RUN TI Lookup analyzer and updates sandbox analyzers.
└──▷ GET THIS VERSION
$ git clone --branch 3.8.4 https://github.com/thehive-project/cortex-analyzers.git
# already have the repo? check out this version:$ git checkout 3.8.4
Adds ANY.RUN TI Lookup analyzer for threat intelligence lookups via the ANY.RUN service.
Adds org-level license policy management, opt-in file components in SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. exports, and fs-scan auto-update
fs-scan binaries now auto-update on startup from signed releases with Ed25519Ed25519A fast elliptic-curve signature scheme with small keys, the default for new SSH keys and common in code signing. It is not quantum-safe. verification
GET /api/public/v0/components returns canonical software identifiers including encoded PURLPURLA Package URL — a community-maintained spec for identifying software packages across ecosystems (npm, PyPI, Maven, etc.) with a single, consistent string, letting cyber tools pinpoint exact dependencies unambiguously. and full CPECPECommon Platform Enumeration, an NIST-maintained naming scheme that gives software, hardware, and operating systems a structured, machine-readable identifier so cyber tools can match vulnerabilities to affected products consistently. set per component
SBOM exports support opt-in file components with CycloneDXCycloneDXAn open standard for describing software components and their dependencies, vulnerabilities and other supply-chain information. Tools use it to exchange bills of materials and related evidence.-derived cryptographic hashes via per-project setting
3 details in Everything
1 more release in this issue
· 2026-05-05 → 2026-05-08
FSI adds custom license creation, file-level SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. components, and fs-scan auto-update
GET /api/public/v0/components returns a softwareIdentifiers block with PURLPURLA Package URL — a community-maintained spec for identifying software packages across ecosystems (npm, PyPI, Maven, etc.) with a single, consistent string, letting cyber tools pinpoint exact dependencies unambiguously. and CPECPECommon Platform Enumeration, an NIST-maintained naming scheme that gives software, hardware, and operating systems a structured, machine-readable identifier so cyber tools can match vulnerabilities to affected products consistently. data for each component.
Adds inline creation of custom licenses with SPDXSPDXAn open standard for describing software components, licenses and their relationships. Its documents let different tools exchange a software bill of materials without inventing a new format.-style identifiers within license policies, supplementing the standard SPDX catalog.
Frida 17.10.0 adds composable Interceptor options via SessionOptions and JavaScript APIs, new UnwindBroker, and stealth improvements.
SessionOptions exposes agent feature toggles for exceptor mode, unwind broker, exit monitor, and thread suspend monitor, plus linker notifier offsets.
Replace old attach flags in the Interceptor API with composable option structs covering scratch register selection, relocation policy, replacement data, and listener data
Expose custom redirect emitters and default Interceptor options through QuickJS and V8 runtimes to make hook sites less predictable
Add support for 32-bit ARMARMA family of RISC processor architectures designed by Arm Holdings and licensed to chip makers worldwide; tools target it to run natively on mobile, embedded, and increasingly server and desktop hardware. EH ABI in the new UnwindBroker, including ARM-specific personality and exidx handling
Enable stalker-x86 unwind support on Android, matching the arm64 backend
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The old attach flags in the Interceptor API are replaced by composable option structs
1 more release in this issue
· 2026-05-11 → 2026-05-31
AsmResolver v6.0 introduces Platform abstraction for ARM32/ARM64ARM64The 64-bit instruction set architecture from ARM Holdings, used in modern mobile chips, Apple Silicon, and cloud server CPUs; tools target it to run natively on those platforms without emulation overhead., RuntimeContext for multi-assembly resolution, and TemplatedPEFileBuilder.
└──▷ GET THIS VERSION
$ git clone --branch v6.0.0 https://github.com/Washi1337/AsmResolver.git
# already have the repo? check out this version:$ git checkout v6.0.0
TemplatedPEFileBuilder provides a flexible foundation for building native Windows PEs and mixed-mode .NET modules.
Platform class enables architecture-specific processing, including ARM32 and ARM64.
RuntimeContext automates assembly resolution and shared metadata caching for multi-assembly processing.
TargetRuntimeProber allows detection of the target runtime of a PE image without loading it as a full ModuleDefinition.
4 details in Everything
└──▷ BREAKING ON UPGRADE
!All parameterless Resolve methods in favor of the new Resolve and TryResolve methods taking a RuntimeContext.
!Properties and methods that may have implicitly required resolution now take a RuntimeContext as well.
Corellium 7.11 adds one-click RAMRAMWorking memory that holds programs and data while a computer is running. Its contents usually disappear when power is removed. dump, USB direct-upload, storage quotas, NIAP mapping, and keyboard shortcuts.
└──▷ HOW TO FIND IT
Capture live RAM from a running device directly in the browser without CLI tools.
📍In the VM admin control panel, click Dump RAM next to Take Screenshot.
Upload large IPSW images or forensic dumps via USB to avoid network latency.
📍Plug in a USB drive, select it in the Corellium UI, and upload the file directly.
Toggle the new command palette to navigate Corellium quickly using keyboard shortcuts.
📍Press CMD + K on macOS or Ctrl + K on Windows/Linux.
Adds a Dump RAM button in the VM admin control panel for live memory acquisition streamed to the workstation
Allows uploading files directly from USB or attached storage via the Corellium UI to bypass network bottlenecks
Provides Cluster Storage and VM Storage views on the Devices page to display exact available storage quotas before provisioning
Enables automatically mapping MATRIX-detected vulnerabilities to NIAP standards for compliance reporting
Adds a Command Menu toggled by CMD + K (or Ctrl + K) for keyboard-driven navigation across Corellium
Capstone 5.0.8 adds x86 MOVSXD support, LUT-based x86 speedup, and RTLD_DEEPBIND isolation for Python on Linux.
└──▷ GET THIS VERSION
$ git clone --branch 5.0.8 https://github.com/aquynh/capstone.git
# already have the repo? check out this version:$ git checkout 5.0.8
Adds support for decoding x86 MOVSXD instructions.
Speeds up x86 decoding by switching to lookup tables (LUTs), unlocking faster disassembly pipelines.
Python bindings on Linux now load libcapstone.so with RTLD_DEEPBIND, isolating symbol scope and enabling safe use alongside a second Capstone version in the same process.
3 details in Everything
0 more releases in this issue1 more release in this issue · 2026-05-23
x64dbg adds module RVA display mode, toolbar hotkey tooltips, PageUp/PageDown selection, and Linux CPUStack support.
└──▷ GET THIS VERSION
$ git clone --branch 2026.05.27 https://github.com/x64dbg/x64dbg.git
# already have the repo? check out this version:$ git checkout 2026.05.27
Adds CPUStack panel for the experimental Linux debugger.
Adds module RVA address display mode in the CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. view.
Adds IMAGE_FILE_LARGE_ADDRESS_AWARE flag support to x32dbg.
Moves the toggle FPU button into a menu for a cleaner toolbar.
Adds PageUp/PageDown selection movement in the UI.
+2 moreshow less
Shows hotkeys in toolbar tooltips.
Supports passing an absolute path to the -cf command-line flag.
CHIPSEC 2.0.4 adds execution timestamps to logs and ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability.-format datetime in auto-log filenames.
└──▷ GET THIS VERSION
$ git clone --branch 2.0.4 https://github.com/chipsec/chipsec.git
# already have the repo? check out this version:$ git checkout 2.0.4
Captures time of execution in CHIPSEC logging output.
Uses ISO 8601 format for datetime in auto-generated log filenames.
Admin GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands. rewritten with egui; client on *Nix writes config files with o600 permissions.
└──▷ GET THIS VERSION
$ git clone --branch v0.3.5 https://github.com/malwaredb/malwaredb-rs.git
# already have the repo? check out this version:$ git checkout v0.3.5
feat(gui): rewrite replaces the admin UI implementation with egui
Abnormal AI adds Detection 360 visibility and AI-driven auto-deployment for threat detection coverage.
└──▷ HOW TO FIND IT
Monitor the end-to-end lifecycle of detected threats on a single console to assess protection efficacy.
📍In the Abnormal AI platform, navigate to the Detection 360 Dashboard to view org-level visibility into detections and impacted messages trends.
Leverage automated investigation for missed threats to reduce manual triage effort.
📍Report a missed threat via the platform; AI Detection Agents will automatically investigate the miss and deploy targeted detections for similar variants.
Adds Detection 360 Timeline for case-level traceability from user submissions to investigation and deployed detections.
Adds Detection 360 Dashboard providing org-level visibility into detections, impacted messages, and trends on a unified console.
Introduces AI Detection Agents to automatically investigate reported misses and deploy targeted detections for similar attack variants.
AI Phishing Coach now injects the Microsoft External tag into Outlook simulations via DMI
└──▷ HOW TO FIND IT
Run DMI-based phishing simulations against Outlook users that include the External banner, ensuring realistic engagement without switching to SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure..
📍No code or CLI required; the feature is automatically enabled for all AI Phishing Coach customers.
Adds automatic injection of the Microsoft External tag into Direct Mail Integration (DMI) simulations sent to Outlook users
Enables end-to-end simulation realism parity between DMI and SMTP delivery modes for phishing awareness training
Adds granular remediation thresholds and per-tenant overrides for account takeover automation in Abnormal AI.
Adds Advanced tab to Automatic Remediation Threshold settings allowing independent configuration of actions (Revoke Sessions, Password Reset, Disable Account) for M365, Google Workspace, Okta at High, Medium, and Low confidence levels.
Adds Custom option in the Basic tab of Automatic Remediation Threshold settings to unlock full customized control over remediation actions.
Adds Custom Tenant Settings feature enabling admins to define per-tenant remediation behavior that overrides account-level defaults for specific tenants.
Abnormal AI updates credential-phishing/attachment detection heuristics and adds automated vendor fraud case generation.
Adds 21 new behavioral heuristics for enhanced attachment analysis engine targeting QR codes, JavaScript inside PDFs, and password-protected nested archives
Enables automated generation of vendor fraud cases via a deterministic vendor fraud policy layer within the AI Workflow
Increases overall processing throughput by approximately 38% for vendor fraud case classification
Expanded training library adds video content on deepfakes, smishing, MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. fatigue, and vendor email compromise.
Adds video modules covering multi-channel attacks spanning email, SMSSMSShort Message Service, the protocol built into cellular networks for sending text messages between phones; cyber tools use it for alerting, two-factor authentication delivery, or phishing simulation over mobile channels., voice, collaboration tools, cloud services, and mobile
Adds coverage of major attack categories including deepfakes, OAuth abuse, BEC/VEC, and credential phishing
Provides a broader library to give security teams more flexibility to tailor training programs
GWS malicious calendar invite auto-remediation and new Calendar Invite Threat Log filter.
Automatic removal of malicious calendar invites from Google Workspace calendars when linked emails are remediated as Attack, Borderline, or Spam
New Calendar Invite filter in the Threat Log across Portal, CSV export, SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., and REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services.
New Quarantine Digests feature enables visibility into quarantined messages and user release requests.
Manage → Quarantine Digests allows configuration of digest delivery frequency (daily or weekly) and recipients (all active mailboxes or specific Lists)
Release Requests → Quarantine Digests provides a new area to review and manage user requests
Granular access permissions for Quarantine Digests are now available via RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists.
Platform v1.83.55 introduces one-click sender blocklisting via UI, creating a new blocklisted_senders List and associated Rule for immediate quarantine.
└──▷ HOW TO FIND IT
Quarantine a specific sender's future messages immediately from an open investigation without navigating to global settings.
📍Open the message in Investigation View and click the Block button next to the sender's email address under Message Content
Adds a Block button in the investigation view to instantly add or remove senders from the new blocklisted_senders List and trigger the new Blocklisted Senders Rule.
Sophos Email Security 2026.20 adds AI header analysis, newly registered domain protection, and new premium tier capabilities.
Adds AI-powered summary generation for email headers and authentication results (SPFSPFAn email authentication standard that lets a domain owner publish, via DNS, which mail servers are authorized to send on its behalf, so receiving servers can reject spoofed senders., DKIMDKIMAn email authentication standard that lets a sending mail server cryptographically sign outgoing messages so receiving servers can verify the signature was not forged or tampered with in transit., DMARC) to help assess message suspicion.
Cortex XSOAR 8.13 On-prem adds Info mode in playbook editor and auto storage expansion via TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency.
Adds Info mode in the playbook editor to view task and section details directly in workflow context
Cortex Analytics adds new detection detectors and variants for Google Workspace, Azure, AWS, and Kubernetes environments.
Adds 'MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. was disabled for a Google Workspace user' detector with Medium and Low severity variations
Adds 'Large volume of files potentially containing credentials accessed in Google Drive' detector with Low severity variation for credential harvesting
Cortex XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. 3.18 adds Broker VM upgrade enhancements and fixes static route management.
Broker VM upgrade enhancements improve reliability and stability of the upgrade process with reduced downtime.
The restart_routes command is now fully functional for static route management on Broker VM versions older than 31.0.58.
The legacy route command is deprecated and no longer supported.
Cortex Analytics adds detection for multiple failed AWS assume role attempts and refines LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. traffic detection logic.
Adds Suspicious multiple failed AWS assume role attempts detector to identify potential credential abuse via AWS STSAWS STSAWS Security Token Service, an Amazon Web service that issues short-lived credentials for IAM roles, letting tools authenticate to AWS APIs without storing long-term secrets..
Adds LDAP traffic from an injected thread within a non-standard process variation for deeper LDAP activity analysis.
Adds LDAP traffic from non-standard process executed under an unsigned causality actor in a commonly abused directory variation to detect suspicious lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access. patterns.
Cortex Xpanse Expander 2.13 adds ASTASTAn abstract syntax tree, a structured representation of parsed code. Tools inspect or transform this tree to understand expressions and statements rather than just matching text. alert generation, AI surface coverage expansion, and XQLXQLPalo Alto Networks' query language for searching and correlating telemetry data across endpoints, logs, and network events inside their Cortex platform. lookup datasets.
Generates alerts from positive Attack Surface Testing (AST) results to drive faster response
Expands AI Infrastructure Coverage with new AI Attack Surface Rules for OpenClaw, Hugging Face, and more
Enables creation and management of lookup datasets in XQL for correlating custom data sources with environment events
Cortex XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. 5.1 May 2026 adds FIMFIMFile Integrity Monitoring — a technique that tracks cryptographic hashes or metadata of files on disk and alerts when they change unexpectedly, giving cyber tools a way to detect tampering or unauthorized modification., CaaS support, new analytics suites, AppSecAppSecApplication security: the practice of finding and fixing vulnerabilities in software during design, development, and testing. Cyber tools build on AppSec workflows to shift vulnerability detection earlier in the development lifecycle. API triggers, SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue.-based vuln mgmt for CaaS, and Graph Search SBAC.
Adds File Integrity Monitoring (FIM) for XDR to Windows and Linux via the Cortex XDR agent
Adds Container as a Service (CaaS) support for AWS ECSAWS ECSAmazon's managed container orchestration service that runs Docker containers on clusters of EC2 instances or Fargate, letting tools offload scheduling, scaling, and infrastructure management to AWS. Fargate via Cloud Runtime Security add-on
Adds ciImage and imageRegistry triggers and blockCiImage action to Application Security Policy API (/public_api/appsec/v1/policies) for pre-runtime scanning
Adds unified findingTypes values (CICD_RISKS, VULNERABILITY, SECRETS, IAC_MISCONFIGURATION, CODE_WEAKNESS, LICENSES, OPERATIONAL_RISK, MALWARE, DRIFT) to Application Security Policy API
Adds optional userSbac field to POST method of Application Security Policy API for scoped access control
+31 moreshow less
Introduces Billing Contributors API endpoint to retrieve unique active contributors for billing transparency
Adds CaaS resource visibility in Asset Inventory under Compute assets, organized by ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping., Cloud RunCloud RunGoogle's managed container runtime that executes stateless workloads on demand, scaling to zero when idle, so tools can deploy without managing servers or paying for idle capacity., and Azure Container Instances
Adds granular per-object access control for report templates, playbooks, scripts, and saved queries
Expands Scope-Based Access Control (SBAC) with Account Name attribute for asset groups alongside existing Realm (Account ID)
Adds Malicious Emails Inventory view and AI-based phishing analysis in Advanced Email Security add-on
Adds single-click remediation quick actions from email investigation view
Adds new mailbox inventory in Unified Asset Inventory with mailbox metrics in Email Command Center
Adds detailed WildFire analysis reports accessible directly from the email causality card
Adds Scheduled Tasks, NDRNDRNetwork detection and response, analyzing network activity to find threats and support investigation. It focuses on communication patterns and suspicious traffic across systems. Insights, Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. Federation Services, Google Workspace, Linux Discovery, and Kubernetes Credentials analytics suites
Adds real-time query management for saving, refining, or stopping XQLXQLPalo Alto Networks' query language for searching and correlating telemetry data across endpoints, logs, and network events inside their Cortex platform. queries mid-execution
Introduces new mathematical and analytical functions in Cortex Query Language (XQL)
Adds DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. local application profiles for SSH, FTP, and RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. clients like FileZilla, PuTTY, and Windows Remote Desktop
Enables shared objects file examination to block malicious code via non-standard loading on Linux
Adds on-write detection for mach-o files, non-native macOS binaries (Windows PEs, Linux ELFs), and all Java files
Consolidates Vulnerability & Exposure Management into a unified module with quick links and pivot capabilities
Adds Refine your risk accuracy feature to recalibrate risk scores using custom/third-party security controls
Enables Tenable.sc vulnerability ingestion directly into Cortex Exposure Management
Introduces Vulnerability Ingest API for third-party scanner integration
Extends SBOM-based vulnerability evaluation to CaaS assets via Software Bill of MaterialsSoftware Bill of MaterialsA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue. analysis
Adds Contextual Asset ID column in Vulnerabilities and Packages tables with direct navigation to nested asset tabs
Adds CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. Version 4 support in Cortex Vulnerability Management
Adds SNMPSNMPA UDP-based protocol for querying and managing network devices, standardized by the IETF. Cyber tools use it to pull interface stats, topology data, and device state from routers, switches, and servers at scale. v2/v3 authenticated scan support for Cortex Network Scanner
Adds Policy Compliance Assessment scan type for CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. Benchmarks in Network Scanner
Enables selection of saved Asset Groups as targets in new network scans
Migrates Network Scanner functionality from Settings->Configurations to Modules->Vulnerability & Exposure Management
Introduces Cloud NGFWNGFWA next-generation firewall, combining network access rules with deeper inspection of applications and traffic. It can apply security controls beyond basic addresses and ports. (CNGFW) data source connector for cross-region and cross-account log ingestion
Adds SBAC enforcement in Graph Search with User Groups and Asset Groups scoping
Adds Case Timeline view, integrated asset context, SLAs for issue resolution, and issue exceptions in Investigation and Response
Adds centralized Identity Security profile for Windows Domain Controllers via ITDRITDRIdentity Threat Detection and Response: a discipline focused on detecting and responding to attacks that abuse identity systems such as Active Directory or IAM platforms, giving cyber tools visibility into credential-based intrusions. add-on
Adds Chat with Cortex Agentic Assistant in Slack and natural language visualization capabilities
Allows administrators to remove unused or outdated saved views and filters
36 details in Everything
└──▷ BREAKING ON UPGRADE
!Role permissions for Report Templates, Scripts, Playbooks, and Saved Queries now enforce granular per-object access; default access for new objects is Restricted instead of open.
!Only object Owners or Administrators can delete custom objects; Editors no longer have deletion rights.
!Enhanced application logs (EAL) are moved to non-billable status; EAL data volume is excluded from Data Collection (GB) license consumption totals and removed from the NGFW Ingestion Rate graph.
!NGFW behavioral alerts previously displayed as High severity now correctly display as Critical, potentially triggering different automation rules or notifications based on severity.
Cortex Cloud Posture Management v2.1 adds CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. playbooks, Snyk integration, Alibaba Cloud support, AppSecAppSecApplication security: the practice of finding and fixing vulnerabilities in software during design, development, and testing. Cyber tools build on AppSec workflows to shift vulnerability detection earlier in the development lifecycle. policy API, CLI updates, Data Security Command Center and more.
Adds Unified AppSec policy engine with new /public_api/appsec/v1/policies API endpoints for unified finding types, CI build/registry scan triggers, pipeline blocking, and SBAC during creation
Adds CNGFW (Cloud NGFWNGFWA next-generation firewall, combining network access rules with deeper inspection of applications and traffic. It can apply security controls beyond basic addresses and ports.) as a new external data source connector for streaming traffic and application logs to Cortex Cloud
Adds Alibaba Cloud as a supported CSPM onboarding target with automated asset discovery and out-of-the-box policies
Adds Natively Snyk integration for ingesting SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment. and SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. findings into Cortex Cloud
Adds Unified Human Identities feature creating single virtual identities linking accounts across directories, cloud IdPs, and SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. apps
+54 moreshow less
Adds GCP Vertex Model Garden support for AI visibility tracking usage patterns and maintaining an AI Bill of MaterialsBill of MaterialsA structured list of every component, library, and dependency that makes up a piece of software or hardware, used by cyber tools to track what is inside a product and surface known vulnerabilities in its parts. (AI-BOMAI-BOMAn inventory of every AI model, dataset, and dependency used in a system, analogous to a software bill of materials, giving cyber tools a structured way to audit AI supply-chain risk.)
Adds on-premise database support for Expanded DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores. governance across hybrid infrastructure
Introduces Data Security Command Center (Beta) as a centralized dashboard for monitoring data discovery, classification, and security across connected stores
Expands CSPM automation with new playbooks and quick actions for remediation of internet-exposed compute instances and cloud misconfigurations across AWS, Azure, GCP
Enables manual AWS account onboarding flow allowing administrators to provision resources and IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. permissions directly without vendor templates
Enables manual GCP project onboarding flow allowing administrators to provision resources, service accounts, and permissions directly without vendor templates
Adds Bring your own Azure EventHub capability for routing cloud audit log collection through customer-owned EventHubs
Allows connecting Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. independently of tenant-level onboarding to enable CIEM, identity posture, and sign-in logs
Normalizes OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. audit logs into the cloud_audit_logs dataset for unified cross-cloud investigation via XQLXQLPalo Alto Networks' query language for searching and correlating telemetry data across endpoints, logs, and network events inside their Cortex platform.
Adds new public API endpoint Billing Contributors to retrieve unique active contributors factored into billing for seat transparency
Extends SBAC (Scope-Based Access Control) to allow defining Asset Groups scoped by Account Name attribute in addition to existing Realm/Account ID scoping
Enforces granular per-object access permissions across report templates, playbooks, scripts, and saved queries in Access Management
Automatically detects AWS Web Application Firewall (AWS WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server.) instances to improve visibility of internet-exposed cloud assets
Adds AI associated insight to instantly locate compute assets deploying AI models or containing AI software in their SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue.
Identifies Hugging Face open-source models found on virtual machines as self-managed and open-source for complete AI-BOMBOMA Bill of Materials listing every component, library, and dependency in a software project; cyber tools use it to track what is in a codebase and flag known-vulnerable components quickly. tracking
Displays Security Drift Detected highlight and dedicated Security Drift tab on Container Instances asset cards in Asset Inventory
Shows base image visibility for Build, Registry, or Runtime container images via has base reference and is base reference for relationships in Security Graph
Enables filtering the ASPMASPMApplication security posture management, combining findings about applications from multiple tools and relating them to business context. It helps teams decide which fixes matter most. Command Center by one or more applications and a time range
Allows drilling down into ASPM Command Center prioritization funnel insights to view supporting evidence such as blocked findings
Enhances Urgency scoring coverage by extending calculations to active VM images and instances
Evaluates compensating controls (e.g., XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. Agent coverage) to automatically lower Urgency scores for detected assets
Correlates detected AWS API keys with their associated identity to improve impact assessment in Urgency scoring
Adds 'Chat with the Agentic Assistant directly in Slack' allowing users to trigger tasks and get results within Slack
Enables Natural language visualizations via Cortex Agentic Assistant to turn questions into charts without coding
Allows associating out-of-the-box config, identity, and AI cloud security rules with custom controls
Consolidates CaaS resources from Amazon ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping., Google Cloud RunCloud RunGoogle's managed container runtime that executes stateless workloads on demand, scaling to zero when idle, so tools can deploy without managing servers or paying for idle capacity., and Azure Container Instances into a dedicated section of the Asset Inventory under Compute assets
Expands notification forwarding fields for S3, SQS, Webhook, Splunk, and email to include asset name, cloud resource name, tags, account name, region, and evidence
Allows administrators to remove unused or outdated saved views and filters created by other users
Achieves Event-based Asset Ingestion (EAI) parity with Prisma Cloud for real-time monitoring via improved data processing speeds
Adds Support for importing configurations from existing Broker VM 31.x versions to the new Debian 13 based image during migration
Adds Advanced Settings in Broker VM web interface for legacy SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. renegotiation and accepting certificates without an Authority Key Identifier (AKID)
Presents a centralized Compliance Overview Dashboard showing compliance performance against industry standards and internal frameworks
Updates compliance score calculation to reflect the status of all assessed controls for all assessed assets
Allows querying OCI audit logs alongside AWS, Azure, and GCP activity using a unified schema via XQL
Enforces SBAC in Graph Search by assigning users to User Groups and Asset Groups to control visibility of graph nodes
Detects inactive identities for Google Cloud Platform users to help revoke unnecessary access
Enhances OCI effective permission calculations with Identity Domain support, additional dynamic group sources, and pseudo-resource handling
Introduces Case Timeline view capturing every action, artifact, and evidence in an end-to-end investigation lifecycle
Connects asset data directly to cases and issues for richer investigation context
Centers all remediation actions (recommended/pending actions, playbooks, CLI commands) in the Resolution tab and syncs to the case's Resolution Center
Adds Service Level Agreements (SLAs) for issue resolution to ensure critical issues are resolved within consistent timeframes
Formalizes risk deferrals using Exception Management for Issues with snooze capabilities, documented justifications, and approval workflows
Consolidates Kubernetes controls into a unified management interface accessible from the Kubernetes Clusters page
Enables pulling images directly from private container registries in Enhanced Kubernetes Connector security
Supports GitOpsGitOpsA practice where Git repositories serve as the single source of truth for infrastructure and application state, with automated systems continuously reconciling live environments to match what is declared in version control. workflows for standalone Kubernetes Connectors via installer updates
Restricts connector management to specific namespaces instead of the entire cluster and removes unnecessary secret creation permissions
Associates XDR security profiles with specific connectors using new Tag support during Kubernetes configuration
Improves KSPMKSPMKubernetes Security Posture Management: a category of tooling that continuously audits Kubernetes clusters against configuration best practices and compliance policies to surface misconfigurations before attackers exploit them. Graph design to streamline exploration of relationships between workloads, nodes, and cloud resources
Adds Failure Policy setting to choose whether to allow or block requests if the Kubernetes admission controller is unreachable
Adds Request Scan button and API support to trigger on-demand Kubernetes cluster scans for inventory, containers, and nodes
Optimizes resource usage by having the KSPM posture module handle Adaptive Vulnerability Assessment (AVA) scans when a connector is deployed, disabling the XDR agent's AVA
Sets default access for newly created custom objects to Restricted so only the creator can access them initially
Changes Role permissions for Report Templates, Scripts, Playbooks, and Saved Queries to manage access at the individual custom object level
Restricts deletion of custom objects to only the Owner or an Administrator, removing Editor delete rights
59 details in Everything
└──▷ BREAKING ON UPGRADE
!Newly created custom objects default to Restricted access instead of Public.
!Role permissions for Report Templates, Scripts, Playbooks, and Saved Queries now manage access at the individual custom object level rather than a global setting.
!Deletion of custom objects is restricted to the Owner (creator) or an Administrator; Editors no longer have delete permission.
Cortex Cloud Runtime Security May 2026 adds GCP Vertex AI detection, OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. Object Storage DSPMDSPMData security posture management, locating sensitive data and checking how it is protected and who can reach it. It helps teams prioritize risks around their data stores., NLP viz in Slack, Snyk integration, and on-demand K8s scans.
Adds has base reference and is base reference for relationships in Security Graph to trace container image lineage from the asset details page
Enables triggering on-demand Kubernetes cluster scans via a new API and UI button to evaluate newly deployed resources instantly
Introduces a public Billing Contributors API endpoint to retrieve unique active contributors factored into billing
Adds GCP Vertex Model Garden discovery to track AI models as assets with activity data even without specific endpoints
Supports Alibaba Cloud account onboarding for unified security visibility across AWS, Azure, GCP, and OCI environments
+3 moreshow less
Integrates Snyk SASTSASTStatic application security testing, analyzing source code or compiled code for vulnerabilities without running the application. It helps developers find problems before deployment. and SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. findings into Cortex Cloud via a new marketplace integration to centralize visibility
Adds Unified AppSecAppSecApplication security: the practice of finding and fixing vulnerabilities in software during design, development, and testing. Cyber tools build on AppSec workflows to shift vulnerability detection earlier in the development lifecycle. policy engine with /public_api/appsec/v1/policies API updates for unified finding types and pipeline blocking
Enables OCI Object Storage discovery and classification within the Data Security Platform module
8 details in Everything
└──▷ BREAKING ON UPGRADE
!All newly created custom objects are now Restricted by default, meaning only the creator can access them until changed to Public.
!Only the object Owner or an Administrator can delete a custom object; Editors can no longer delete them.
Prisma Cloud Compute Edition 34.04 adds per-image cluster caps, OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. compartment OCID support for agentless scanning, and PURLPURLA Package URL — a community-maintained spec for identifying software packages across ecosystems (npm, PyPI, Maven, etc.) with a single, consistent string, letting cyber tools pinpoint exact dependencies unambiguously. augmentation for binary packages.
Adds configurable cap for the number of clusters stored per image in MongoDB to prevent excessive document growth
Expands agentless scanning configuration to accept OCI compartments by OCID in addition to compartment name
Augments binary packages with Package URLs (PURLs) to improve software composition analysissoftware composition analysisSoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. accuracy
Cortex XSIAM 3.5 (May 2026): New APIs, detections, integrations, and Agentic Assistant capabilities
Adds Application Security Policy API with new triggers.ciImage, triggers.imageRegistry, blockCiImage action, unified findingTypes, and optional userSbac field for scoped access
Introduces new Billing Contributors API endpoint to retrieve active contributors for billing transparency
Adds SBAC enforcement in Graph Search allowing users to assign user groups and asset groups for granular control
Enables Container as a Service (CaaS) support for AWS ECSAWS ECSAmazon's managed container orchestration service that runs Docker containers on clusters of EC2 instances or Fargate, letting tools offload scheduling, scaling, and infrastructure management to AWS. Fargate within Endpoint Security via XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. Agent
Deploys advanced macOS kernel behavioral monitoring for near-real-time privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. prevention
+15 moreshow less
Adds on-write detection for mach-o, non-native binaries (Windows PE, Linux ELFELFThe standard binary format for executables, shared libraries, and object files on Linux and most Unix-like systems, giving cyber tools a predictable structure to parse, instrument, or analyze compiled code.), and Java files in Endpoint Security
Examines and blocks malicious shared object files on Linux in the Cortex XDR agent
Launches new analytics suites: Scheduled Tasks, NDRNDRNetwork detection and response, analyzing network activity to find threats and support investigation. It focuses on communication patterns and suspicious traffic across systems. Insights, Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. Federation Services, Google Workspace, Linux Discovery, and Kubernetes Credentials
Adds new XQLXQLPalo Alto Networks' query language for searching and correlating telemetry data across endpoints, logs, and network events inside their Cortex platform. mathematical/analytical functions and autosave/personalized view persistence in Query Builder
Expands notification forwarding fields to include asset name, cloud resource name, tags, account name, region, and evidence for S3, SQS, Webhook, Splunk, and email
Enables Slack integration for Cortex Agentic Assistant to trigger tasks directly from the application
Adds Scope-Based Access Control (SBAC) with Account Name attribute support in Access Management
Introduces Refine your risk accuracy feature in Exposure Management to recalibrate risk scores based on custom controls
Provides Vulnerability ingest API and Tenable.sc integration for third-party vulnerability data
Adds Compliance Policy Audit scan type and SNMPSNMPA UDP-based protocol for querying and managing network devices, standardized by the IETF. Cyber tools use it to pull interface stats, topology data, and device state from routers, switches, and servers at scale. v2/v3 authentication support in Network Scanner
Enables near-real-time Salesforce event collection and new CNGFW data source for cloud-native visibility
Supports CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. V4 framework in Vulnerability Management and adds SBOMSBOMA software bill of materials, an inventory of the components and versions inside an application. It helps teams find affected software when a dependency has a vulnerability or licensing issue.-based evaluation for CaaS assets
Adds Contextual Asset ID column in Vulnerabilities and Packages tables to trace finding origins
Allows import of configuration to Debian 13 broker image via Import Configuration tool enhancements
Adds Granular Per-Object Access control for user groups across report templates, playbooks, scripts, and saved queries
20 details in Everything
└──▷ BREAKING ON UPGRADE
!Role permissions for Report Templates, Scripts, Playbooks, and Saved Queries now manage access at the individual custom object level instead of broad role settings
!All newly created custom objects are now Restricted by default (owner-only access) until explicitly set to Public
!Only the object Owner or an Administrator can delete a custom object; Editors lose deletion rights for objects they do not own
!Enhanced application logs (EAL) are moved to non-billable status and excluded from Data Collection quota calculations and the NGFWNGFWA next-generation firewall, combining network access rules with deeper inspection of applications and traffic. It can apply security controls beyond basic addresses and ports. Ingestion Rate graph
!NGFW behavioral alerts previously mapped to High severity are now mapped to Critical severity in Cortex XSIAM, potentially triggering different automation or notification rules
Cortex XDRXDRExtended detection and response, combining signals and investigation across endpoints, networks, identities or cloud services. It helps analysts connect activity that separate tools might miss. 3.18 adds macOS/Linux kernel prevention, on-write detection, scheduled query management, and several new analytics suites.
Adds macOS and Linux kernel behavioral monitoring to prevent privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. attempts in near-real-time
Adds Device guardrails for SD cards to block devices connected via the PCIPCIA hardware bus standard that connects peripheral devices to a computer's motherboard; cyber tools targeting hardware-level forensics or memory analysis use it to access device registers and DMA regions directly. Bus
Adds Real-time query management allowing users to refine, validate, or stop running queries before completion
Adds on-write detection for malicious mach-o files, non-native macOS binaries, Windows PEs, and Linux ELFs the moment they are saved
Adds Android zero-touch installation support via MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. providers like Workspace ONE and Intune
+9 moreshow less
Adds Scheduled Tasks Analytics to identify malicious persistence through scheduled task installation and execution
Adds NDRNDRNetwork detection and response, analyzing network activity to find threats and support investigation. It focuses on communication patterns and suspicious traffic across systems. Insights Analytics to correlate low-fidelity network signals with existing alerts
Adds Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. Federation Services Analytics to detect suspicious behavior within AD FS
Adds Google Workspace Analytics to detect attack attempts including brute force, phishing, and credential harvesting
Adds Linux Discovery Analytics to identify reconnaissance and host environment mapping activities
Adds Kubernetes Credentials Analytics to identify credential harvesting techniques such as kubelet impersonation
Adds Identity Profile in Centralized Identity Security for Domain Controllers to monitor LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. protection and AD misconfigurations
Adds Broker VM Advanced Settings options for legacy SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. renegotiation and accepting certificates without Authority Key Identifier (AKID)
Enhances Import Configuration tool to support migration of existing Broker VMs to the new Debian 13 based image
14 details in Everything
└──▷ BREAKING ON UPGRADE
!EAL data is no longer displayed on the Data Ingestion dashboard or NGFWNGFWA next-generation firewall, combining network access rules with deeper inspection of applications and traffic. It can apply security controls beyond basic addresses and ports. Ingestion Rate graph, as EAL logs are now non-billable and excluded from quota totals.
!NGFW behavioral alerts previously mapped to High severity by the Detection & Mapping Service now display as Critical; existing automation rules or notification profiles based on alert severity require adjustment.
Cortex XSOAR 8.14 SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. adds multi-tenant name renaming, content workspace separation, expanded audit logs, and new CrowdStrike/AzureWAF integrations
Adds the ability to rename child tenants from within Cortex Gateway for simplified tenant management
Introduces a dedicated workspace structure that moves all content pack items to the Content Pack Items page, reserving the Content Items page exclusively for custom creations
Enhances audit logs with expanded auditing for notification forwarding configuration changes and high-stakes content lifecycle events such as pushing content to production in the Management Audit log
Adds Identity and privilege-based SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. response via CyberArk Endpoint Privilege Manager integration available through Cortex Marketplace
Adds new data collection type to the CrowdStrike Falcon integration to capture additional security events
+1 moreshow less
Adds support for ingesting and analyzing Azure Front Door WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. policy data in the AzureWAF integration
Vectra AI v9.11 adds SASESASEA network architecture model combining wide-area networking and network security functions into a single cloud-delivered service, letting cyber tools enforce consistent policy regardless of where users or workloads sit. exfiltration and Beaconless C2 detection with behavioral models.
Extends Smash-and-Grab exfiltration detection to SASE traffic (Zscaler and Netskope).
Adds XWorm C2 Detection for encrypted TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. check-in patterns.
Vectra AI v9.11 adds traffic visibility drop alerting via email, webhook, API, Syslog and a new top-bar UI.
└──▷ HOW TO FIND IT
Receive visibility drop alerts via Syslog for immediate integration with SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. pipelines.
📍Configure Syslog as a delivery target in the Vectra AI QUX platform settings.
Access account profile and theme preferences from the new centralized top bar navigation.
📍Click the account menu in the top-right corner of the Vectra AI UI page.
Adds health notifications for drops in observed IPs, traffic bandwidth, and packet volume with adaptive ML detection
Adds email, webhook, API, and Syslog delivery targets for visibility drop alerts on QUX
Introduces a new top bar UI element for account settings, theme preferences, and logout options
Aviatrix Controller 9.0 adds DCF IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection., East-West TGW inspection, K8S discovery, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. Phase 2, ActiveMesh 4.0 Phase 2, S2C on scaled transit, and Edge image upgrades.
aviatrix_spoke_gateway and related resources gain private_route_table_config to explicitly select Azure route tables for DCF egress SNAT
Adds DCF East-West inspection for AWS TGW environments by inserting spoke gateways into the traffic path without re-architecture
Kubernetes workload discovery is now enabled by default for SmartGroup policy enforcement
ActiveMesh 4.0 Phase 2 enables dynamic HPE toggle at gateway group level with mixed HPE/non-HPE support during transition
+13 moreshow less
First-hop VRFVRFA Virtual Routing and Forwarding instance is a router feature that maintains multiple independent routing tables on one device, letting a cyber tool isolate traffic flows or simulate separate network segments without extra hardware. support allows overlapping CIDRs from multiple S2C connections via kernel VRF namespace isolation on Transit GatewayTransit GatewayAn AWS-managed network hub that connects VPCs and on-premises networks through a single gateway, replacing complex peering meshes and giving cyber tools a central point to route or inspect cross-network traffic.
Proxy ID configuration for route-based Site2Cloud tunnels enables specific local/remote traffic selectors instead of default 0.0.0.0/0
S2C is now supported on horizontally scaled (Smart Gateway) transit groups with 3 or more gateways
Dell R470 hardware platform is added for AEP Edge with 25G NICNICA network interface card or adapter, the hardware that connects a computer to a network. It sends and receives packets over the link. support
Image upgrade for self-managed and Equinix Edge Gateways is supported without deleting the gateway from the Controller
FireNet supports per-firewall Panorama template and template stack for heterogeneous configurations within the same FireNet gateway
Azure FireNet firewall management interfaces are scoped to Aviatrix Controller IP, replacing open 0.0.0.0/0 rules
Default route propagation from Transit FireNet to Edge Spoke gateways is enabled
Centralized Security Hub VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. for AWS is available via API only, auto-provisioning VPC infrastructure including GWLB and endpoint services
DCF enforcement is extended to Edge gateways (Spoke and Transit) with L4/L7 filtering and TLS decryption capabilities
BGPoLAN is now available in Azure China (21Vianet)
DCF Policy Audit provides structured diffs and change attribution for DCF entities, exportable via API
DCF extends SmartGroups and policies to serverless resources including AWS Lambda, ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping./Fargate, Azure Functions, Container Apps, GCP Cloud Functions, and Cloud RunCloud RunGoogle's managed container runtime that executes stateless workloads on demand, scaling to zero when idle, so tools can deploy without managing servers or paying for idle capacity.
18 details in Everything
└──▷ BREAKING ON UPGRADE
!GCP Regional VPCsVPCsVirtual Private Clouds — isolated, software-defined network environments inside a public cloud provider such as AWS, Azure, or GCP — give cyber tools a controlled network boundary with configurable routing, subnets, and access rules. now use the Spoke Gateway for local egress by default for all workloads instead of requiring avx-snat-noip tagging
!Azure VNET local egress no longer auto-detects route tables; administrators must explicitly select them via private_route_table_config, causing plan drift in existing Terraform configs
Zeek v8.0.8 adds MIME header size cap with new variable and weird to mitigate DoS via crafted SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure./HTTP packets.
└──▷ GET THIS VERSION
$ git clone --branch v8.0.8 https://github.com/zeek/zeek.git
# already have the repo? check out this version:$ git checkout v8.0.8
Adds MIME::max_header_bytes script variable to cap the maximum size of a MIME header, limiting memory exhaustion from crafted SMTP or HTTP packets.
Adds exceeded_mime_max_header_bytes weird reported when a MIME header exceeds the configured byte limit, halting further processing of that packet.
Zeek v8.2.0 adds ZeroMQZeroMQA messaging library that provides socket-like abstractions for async message passing over TCP, IPC, or in-process transports, letting tools wire together distributed components without a dedicated message broker. CURVE encryption, IGMPIGMPA network-layer protocol used by IPv4 hosts and routers to manage multicast group membership, letting routers know which hosts want traffic for a given multicast address. analyzer, &publish_on_change for cluster tables, and configurable analyzer ports.
└──▷ GET THIS VERSION
$ git clone --branch v8.2.0 https://github.com/zeek/zeek.git
# already have the repo? check out this version:$ git checkout v8.2.0
└──▷ USE IT
Publish only newly-added entries from a cluster-shared set to all nodes without Broker, replacing &broker_store.
zeek
global endpoints: set[addr, addr] &write_expire=5min &publish_on_change=[
changes=set(TABLE_ELEMENT_NEW),
];
Generate a Z85 CURVE keypair for encrypted ZeroMQ cluster communication and inspect it.
Add a non-standard port to the HTTP analyzer so Zeek detects HTTP on port 8181 without recompiling.
zeek
# In a local.zeek or site script:
redef HTTP::ports += { 8181/tcp };
New &publish_on_change attribute for global tables and sets enables efficient publishing of selected table changes as remote events to a configurable cluster topic, replacing deprecated Broker-specific sync attributes.
ZeroMQ cluster communication now supports CURVE encryption; keys auto-generated by ZeekControl when a multi-node cluster is detected, or manually configured via cluster_backend_zeromq.use_curve_encryption.
ZeroMQ XPUB/XSUB proxy metrics (zeek_cluster_zeromq_proxy_{frontend,backend}_{bytes,messages}_{sent,received}) are now exposed for cluster traffic monitoring.
Well-known ports for built-in analyzers are now configurable via redef, e.g. redef HTTP::ports += { 8181/tcp }.
New IGMP analyzer adds events for each IGMP message type.
+8 moreshow less
The dns.log now records DNS notifications (RFC 1996) with opcode 4 and opcode_codenotify.
The @load directive now supports loading shared object (.so) files directly, enabling alternative plugin layouts without ZEEK_PLUGIN_PATH discovery.
New connection_timing_out hook allows scripts to prevent Zeek from timing out a specific connection, useful for keeping shunted connections alive.
New modulo BiF added, with different behavior from % for negative numbers.
The &on_change attribute for tables and sets now accepts variable-argument functions.
Windows support substantially improved; btest suite now runs on CI and the majority of tests pass.
X.509X.509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. parsing now supports additional key types (e.g. ML-DSAML-DSANIST's main post-quantum digital signature standard (FIPS 204), formerly Dilithium. It is the planned replacement for RSA and ECDSA signatures on certificates and code.) for certificate key length and key_type fields.
SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. analyzer now forwards the first gap encountered during RFC 822 message analysis to the file object, enabling gap detection via missing_bytes in files.log.
13 details in Everything
└──▷ BREAKING ON UPGRADE
!The minimum version requirement for ZeroMQ is now 4.3.0; older ZeroMQ installations will no longer work.
!Enums are now nominally typed; scripts mixing incompatible enum types (e.g. color and city) will produce warnings now and errors in v9.1.
!The BifEnum namespace was moved into the zeek namespace; scripts or plugins referencing BifEnum:: directly will break.
!The MetricsAddress default in zeekctl.cfg changed from 0.0.0.0 to 127.0.0.1; remote Prometheus scrapers or containerized deployments must now explicitly set MetricsAddress = 0.0.0.0 in zeekctl.cfg.
!btest Traces library packet capturespacket capturesA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. now use .pcap/.pcapng suffixes; plugins referencing the old .trace suffix will break.
!The public vlan and inner_vlan C++ Packet members changed from uint32_t to an optional VlanTag struct; the dei and pcp members were removed and merged into VlanTag. C++ plugins accessing these fields must be updated (access via packet.vlan->id after checking the optional).
!ASCII control characters < 32 in JSON strings are now escaped as \xXX again (reverted from the \u00XX style introduced in Zeek 8.1); consumers relying on the \u00XX encoding from 8.1 will see changed output.
!FreeBSD is no longer an officially-supported platform; regular CI builds on FreeBSD have been dropped.
Sophos NDR 2.1.0 adds pcappcapA packet capture, recorded network packets that can be inspected later. Analysts use it to reconstruct communication and investigate protocol behavior or suspicious traffic. traffic injection, unsupervised anomaly detection in DDE, and Oracle Linux 9 for AWS
Adds a new pcap replay feature in Sophos Central to inject malicious and benign traffic for testing detections
Introduces integrated unsupervised anomaly detection in the Data Detection Engine (DDE) as a beta feature
Security Onion 3.1.0 adds Sigma rules for M365/Fortigate, JA4D ingest pipeline, RAIDRAIDA storage architecture that combines multiple physical disks into one logical volume using mirroring, striping, or parity to trade capacity for redundancy, speed, or both. monitoring for VMs, ingest latency metrics, and upgrades to Elasticsearch 9.3.3.
└──▷ GET THIS VERSION
$ git clone --branch 3.1.0-20260521 https://github.com/Security-Onion-Solutions/securityonion.git
# already have the repo? check out this version:$ git checkout 3.1.0-20260521
Adds Sigma rules pipeline mapping for Microsoft 365 and Fortigate log sources.
Adds zeek.ja4d ingest pipeline for JA4D fingerprint processing.
Adds ingest latency metrics collection.
Adds RAID monitoring for virtual machine deployments.
Adds so-postgres Salt states and supporting infrastructure.
+8 moreshow less
Upgrades to Elasticsearch and Elastic Agent 9.3.3.
Adds fleet package registry health check.
Supports bond1 interface for management network configuration.
Adds per-OS-type process creation (proc_creation) Sigma rule handling.
Enables read-only SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. and Kratos modes.
Syncs Elastic Agent packages to fleet nodes automatically.
Verifies Elasticsearch version compatibility across all nodes in the cluster.
13 details in Everything
└──▷ BREAKING ON UPGRADE
!Telegraf output changed from BOTH to INFLUXDB only — deployments relying on the previous dual-output behavior will no longer write to the non-InfluxDB target after upgrade.
Malcolm v26.05.2 adds a File Tree dashboard, Suricata OT detections for D-Link HNAP abuse, and alerting webhook improvements.
└──▷ GET THIS VERSION
$ git clone --branch v26.05.2 https://github.com/cisagov/Malcolm.git
# already have the repo? check out this version:$ git checkout v26.05.2
└──▷ TRY IT
Migrate Malcolm settings before starting the upgraded instance — required when upgrading from any prior installation.
$ ./scripts/status && ./scripts/start
Adds the File Tree visualization dashboard, presenting a hierarchical breakdown of files observed in network traffic — including nested archived files such as ZIP files and tarballs — with parent/child relationship exploration.
Improves the alerting loopback webhook API endpoint.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Upgrading from an existing Malcolm installation requires running ./scripts/status before ./scripts/configure, ./scripts/start, or other Malcolm control scripts to migrate settings.
!NetBoxNetBoxAn open-source network infrastructure management platform maintained by the NetBox Labs community, used to model IP addresses, devices, and topology so cyber tools can query a live source of truth about the environment. is upgraded to v4.5.x (a major release, up from v4.4.10); backing up your NetBox database before upgrading is strongly recommended.
1 more release in this issue
· 2026-05-05 → 2026-05-20
Malcolm v26.05.0 adds file.strings extraction, configurable Zeek timeouts and cluster backends, and NetBoxNetBoxAn open-source network infrastructure management platform maintained by the NetBox Labs community, used to model IP addresses, devices, and topology so cyber tools can query a live source of truth about the environment. custom script auto-registration.
└──▷ GET THIS VERSION
$ git clone --branch v26.05.0 https://github.com/cisagov/Malcolm.git
# already have the repo? check out this version:$ git checkout v26.05.0
└──▷ USE IT
Tune Zeek file analysis to abandon stalled files faster in high-throughput capture environments.
ini
# in ./config/zeek.env
ZEEK_FILE_ANALYZER_TIMEOUT_SEC=3
Switch the Zeek cluster to use ZeroMQZeroMQA messaging library that provides socket-like abstractions for async message passing over TCP, IPC, or in-process transports, letting tools wire together distributed components without a dedicated message broker. as the backend transport instead of the default Broker.
ini
# in ./config/zeek.env
ZEEK_CLUSTER_BACKEND=ZeroMQ
Adds ZEEK_FILE_ANALYZER_TIMEOUT_SEC (default 5) to zeek.env to control how long a file can be inactive before Zeek file analysis discards its internal state.
Adds ZEEK_CLUSTER_BACKEND to zeek.env to select the Zeek cluster backend (ZeroMQ or Broker).
Adds file.strings extraction, indexing, and search support across the Strelka → Logstash → OpenSearchOpenSearchAn open-source search and analytics engine, forked from Elasticsearch by AWS in 2021, that lets cyber tools store, query, and visualize large volumes of log or event data without licensing restrictions. (wildcard field mapping) → Arkime/WISE pipeline.
Adds NetBox custom script support via bind-mounting ./netbox/custom-scripts, with automatic script registration at container startup.
Expands malcolm_appliance_packager.sh to package images for both Malcolm and Hedgehog profiles in a single tarball.
+3 moreshow less
Allows netdev users in ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability.-installed environments to configure network interfaces using nmcli and nmtui.
Reworks NetBox preloaded device roles into a hierarchical taxonomy.
Switches Kubernetes ingress from ingress-nginx (EOL) to Traefik, with a new RKE2/Traefik-based Vagrant environment replacing the old example.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!NetBox startup/control scripts are renamed from netbox/scripts to netbox/control-scripts; any references to the old path will break.
!Run ./scripts/status before ./scripts/configure or ./scripts/start to migrate environment variable settings per ./config/env-var-actions.yml; skipping this step may leave the installation in a broken state.
CrowdSec v1.7.8 adds WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server.OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. schema validation, chunked decision streaming, and a faster cscli enroll flow.
└──▷ GET THIS VERSION
$ git clone --branch v1.7.8 https://github.com/crowdsecurity/crowdsec.git
# already have the repo? check out this version:$ git checkout v1.7.8
Adds OpenAPI schema validation to the WAF, enabling automatic request inspection against defined API schemas.
Enforces body size limits in the WAF to cap memory exposure on large incoming payloads.
Switches the decision stream to chunked transfer encoding by default, improving delivery of large decision sets.
Adds --quick flag to the cscli enroll command for faster enrollment workflows.
Introduces a cleaner alternative configuration format for appsec-config.
ScubaGear v1.8.0 adds centralized run logging, environment/app/guest exclusions, REST-based data collection, and automated conditional policy checks.
└──▷ GET THIS VERSION
$ git clone --branch v1.8.0 https://github.com/cisagov/ScubaGear.git
# already have the repo? check out this version:$ git checkout v1.8.0
Adds a centralized logging module that captures data across all ScubaGear runs for audit and troubleshooting.
Supports excluding specific Power Platform environments from assessment scope via configuration.
Adds application and guest exclusion support, allowing practitioners to scope out known exceptions from policy checks.
Moves SharePoint and Power Platform data collection to REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. calls, replacing older methods.
Collects legacy Exchange hybrid configuration and dedicated hybrid app configuration data for hybrid environment assessments.
+4 moreshow less
Conditional access policies now evaluate automatically instead of requiring manual checks, passing when conditions are met.
Allows parameter overrides and relaxes product validation in the configuration validator for more flexible run configurations.
Enhances Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. policy MS.AAD.7.2v1 with improved detection logic.
Adds workflow support to run assessments for individual products rather than requiring a full suite run.
Prowler 5.28.0 adds Okta App scanning, 4 DISA STIGSTIGA configuration standard published by DISA that specifies hardening requirements for a given OS, application, or device, giving cyber tools a concrete checklist to audit or enforce against. Okta checks, Google Workspace services/groups checks, new AWS/GCP/M365 checks, and a Claude Code plugin.
└──▷ GET THIS VERSION
$ git clone --branch 5.28.0 https://github.com/toniblyx/prowler.git
# already have the repo? check out this version:$ git checkout 5.28.0
└──▷ TRY IT
Install the Prowler Claude Code plugin to let Claude drive compliance assessments against your Prowler Cloud-connected account.
Adds Okta provider support in Prowler App with OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. private-key JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. credentials, enabling read-only scanning of Okta tenants from the UI.
Adds four new medium-severity Okta DISA STIG V1R2 checks: signon_global_session_lifetime_18h, signon_global_session_cookies_not_persistent, signon_global_session_policy_network_zone_enforced, and signon_dod_warning_banner_configured.
Adds four new Google Workspace services with six new checks — Sites (sites_service_disabled), Additional Services (additionalservices_external_groups_disabled), Marketplace (marketplace_apps_access_restricted), and Groups (groups_creation_restricted, groups_external_access_restricted, groups_view_conversations_restricted) — via the Cloud Identity Policy API.
Adds new AWS check ses_identity_dkim_enabled to verify DKIMDKIMAn email authentication standard that lets a sending mail server cryptographically sign outgoing messages so receiving servers can verify the signature was not forged or tampered with in transit. signing is enabled on every SES identity.
Adds new AWS check sagemaker_models_registry_in_use to verify ML governance through the SageMaker Model Registry.
+4 moreshow less
Adds new M365 check entra_app_registration_client_secret_unused to flag dormant Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. app registration client secrets.
Adds new GCP check cloudsql_instance_cmek_encryption_enabled to verify Cloud SQL instances use customer-managed encryption keys.
New Resource Metadata / Evidence tab in the Prowler App finding detail drawer surfaces raw resource attributes captured at scan time, backed by the new resource.metadata attribute on /api/v1/findings?include=resources.
Ships a Claude Code plugin and marketplace entry (prowler-cloud/prowler) enabling Claude to drive end-to-end cloud security and compliance assessments via the Prowler MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server.
9 details in Everything
└──▷ BREAKING ON UPGRADE
!okta.brands.read is now part of DEFAULT_SCOPES for the Okta provider; existing Okta service apps must grant this scope before upgrading or the signon_dod_warning_banner_configured check will fail.
2 more releases in this issue
· 2026-05-11 → 2026-05-22
Prowler 5.27.0 adds Okta and Scaleway providers, 10 new checks across AWS/M365/GWS, a redesigned Attack Paths graph, and Lighthouse AI Finding Groups support.
└──▷ GET THIS VERSION
$ git clone --branch 5.27.0 https://github.com/toniblyx/prowler.git
# already have the repo? check out this version:$ git checkout 5.27.0
└──▷ TRY IT
Audit an Okta tenant for DISA STIGSTIGA configuration standard published by DISA that specifies hardening requirements for a given OS, application, or device, giving cyber tools a concrete checklist to audit or enforce against. session policy compliance in minutes using OAuth read-only credentials.
Audit Scaleway IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. to detect root-owned API keys that bypass all IAM policies.
$ prowler scaleway
Include unattached customer-managed IAM policies in your AWS scan (previously the default behaviour) alongside other unused-service surfaces.
$ prowler aws --scan-unused-services
New Okta provider (CLI-only): authenticate via OAuth read-only credentials and audit your Okta tenant; ships with signon_global_session_idle_timeout_15min mapped to DISA STIG V-273186.
New Scaleway provider (unofficial, CLI-only): audit Scaleway IAM with iam_api_keys_no_root_owned to flag root-owned API keys.
Google Workspace gains a Chat service with 6 CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline.-mapped checks covering app installation, external file sharing, external messaging, external spaces, incoming webhooks, and internal file sharing.
New AWS check cloudtrail_bedrock_logging_enabled verifies at least one CloudTrailCloudTrailAWS service that records API calls and account activity across an AWS environment, giving cyber tools an audit log to detect anomalous or malicious actions. trail records Amazon Bedrock API activity.
New AWS check iam_user_access_not_stale_to_sagemaker flags IAM users with SageMaker access exceeding 90 days (tunable via max_unused_sagemaker_access_days) or who have never accessed SageMaker.
+9 moreshow less
New AWS check sagemaker_domain_sso_configured verifies SageMaker Domains use IAM Identity Center (SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management.) instead of IAM users.
New M365 check entra_service_principal_no_secrets_for_permanent_tier0_roles flags service principals holding credentials for permanent Tier-0 role assignments.
AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege. customer-managed policy checks now scan only attached policies by default; opt in to auditing unattached policies with --scan-unused-services.
Attack Paths graph in the Prowler App rewritten on React Flow with improved layout, pan/zoom, image export, and a minimap.
AWS findings and resource details in the Prowler App now include a one-click View in AWS Console link via the /go/view ARN resolver.
Lighthouse AI can now list, filter, and inspect Finding Groups via new Finding Groups MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools.
PDF Compliance Reports now include only failed findings and cap per-check detail tables at 100 failed findings with a banner pointing to CSV/JSON exports.
Health endpoint added at GET /api/health for Docker Compose liveness checks.
Prowler API and SDK migrated from poetry to uv for faster, deterministic dependency installs.
Adds eight new Google Workspace Gmail checks covering attachment safety (gmail_anomalous_attachment_protection_enabled, gmail_encrypted_attachment_protection_enabled, gmail_script_attachment_protection_enabled) and spoofing protection (gmail_domain_spoofing_protection_enabled, gmail_employee_name_spoofing_protection_enabled, gmail_groups_spoofing_protection_enabled, gmail_inbound_domain_spoofing_protection_enabled, gmail_unauthenticated_email_protection_enabled) via the Cloud Identity Policy API.
Adds three new AWS Bedrock checks: bedrock_guardrails_configured (flags deployments without Guardrails), bedrock_prompt_management_exists (verifies Prompt Management is in use), and bedrock_prompt_encrypted_with_cmk (verifies CMK encryption per prompt).
Adds ASD Essential Eight Maturity Model (Maturity Level One, Nov 2023) as a first-class compliance framework for AWS, with full detail view, top-failed-sections breakdown, and export support.
Adds Prowler Cloud Alerts: auto-provisioned daily digest of critical findings for organization owners, plus custom alert rules scoped by provider, account, severity, or status, with a Create Alert shortcut that converts active Findings page filters into a watching alert rule.
Adds Manage AlertsRBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. permission to gate alert configuration to authorized organization admins.
+5 moreshow less
Rebuilt finding detail drawer for triage: color-coded status banner at top, dedicated Remediation tab, one-click link to resource page, and immediate status render during carousel navigation.
Adds clickable ThreatScore pillars on /compliance that jump to the detail page with the selected accordion pre-expanded and scrolled into view.
Adds scan-reset-ephemeral-resources post-scan API task that zeroes failed_findings_count for resources absent from the latest full-scope scan, preventing ephemeral resources from polluting the Resources page sort.
Container image CVE findings and IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. findings now link remediation references directly to CVE.org, Prowler Hub, and GitHub Security Advisories; Trivy-sourced findings also link correctly into Prowler Hub.
Adds OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. support for universal compliance output in the SDK.
Cloud Custodian 0.9.51.0 adds AI/ML resource coverage across all three clouds plus dozens of new filters and label actions.
└──▷ GET THIS VERSION
$ git clone --branch 0.9.51.0 https://github.com/cloud-custodian/cloud-custodian.git
# already have the repo? check out this version:$ git checkout 0.9.51.0
└──▷ TRY IT
Audit Bedrock foundation models to identify any that lack guardrail configurations in your AWS environment.
Adds aws.bedrock-foundation-model resource for policy enforcement against Bedrock foundation models.
Adds aws.bedrock-guardrail resource for managing and querying Bedrock guardrails.
Adds metrics filter for aws.bedrock-inference-profile resources.
Adds aws.devops-agent-space resource with tag support.
Adds WAFv2 support for querying API attributes including redacted fields.
+21 moreshow less
Adds EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. cluster container insight metrics and addon filters.
Adds ExportDescriptionFilter and ImportSummaryFilter for DynamoDB resources.
Adds statistic override to the usage-metric filter for service-quota resources.
Adds enable connection logs action for Application Load Balancers.
Adds unused filter for rds-param-group and rds-cluster-param-group resources.
Adds ReservationId support for EC2EC2Amazon's cloud virtual-machine service, letting tools run on-demand servers without managing physical hardware. resource filtering.
Adds RDS DB recommendations filter.
Adds cross-account support for aws:PrincipalOrgPaths and whitelisted accounts in policy statements.
Adds azure.ai-foundry-project and azure.ai-foundry-connection resources with associated actions.
Adds Azure Blob Storage as a source for value_from filters.
Adds gcp.vertex-ai-publisher and gcp.vertex-ai-publisher-model resources (Vertex AI Model Garden).
Adds gcp.firestore-database, gcp.firestore-backup-schedule, gcp.firestore-field, and gcp.firestore-index resources.
Adds gcp.ncc-spoke resource for Network Connectivity Center spoke management.
Adds gcp.redis-cluster resource.
Adds delete action for GCP sqlbackuprun resources.
Adds set-labels action for Cloud RunCloud RunGoogle's managed container runtime that executes stateless workloads on demand, scaling to zero when idle, so tools can deploy without managing servers or paying for idle capacity. services and jobs.
Adds label actions for GCP secret, armor-policy, dns-managed-zone, interconnect, interconnect-attachment, loadbalancer, loadbalancer-address, snapshot, pubsub, redis, and function resources.
Adds delete and patch actions for GCP api-key resources.
Adds BigQueryBigQueryA serverless, cloud-hosted analytical database from Google that runs SQL queries across massive datasets without managing infrastructure, giving cyber tools scalable storage and fast querying over large volumes of log or event data. recommender support for GCP.
Adds snapshots filter for GCP disk resources.
Adds validate command to c7n-org for validating policy files across org accounts.
Buildah v1.44.0 adds --metadata-file, --iidfile-raw, --mount, --source-policy-file, Windows image support, and more.
└──▷ GET THIS VERSION
$ git clone --branch v1.44.0 https://github.com/containers/buildah.git
# already have the repo? check out this version:$ git checkout v1.44.0
└──▷ TRY IT
Apply a BuildKitBuildKitA build engine for Docker images, maintained by Moby, that replaces the legacy Docker builder with parallel layer execution, cache mounts, and secret handling — giving cyber tools faster, more reproducible container builds.-compatible source policy file to restrict or redirect image sources during a build.
Adds --metadata-file flag to buildah commit (via new CommitResults() API) to write commit metadata to a file.
Adds --iidfile-raw CLI option to buildah build for writing the raw image ID to a file.
Adds --mount option to buildah build for specifying mounts at build time on the CLI.
Adds support for --mount=type=secret,id=foo,env=bar to expose secrets via environment variables during builds.
Adds --source-policy-file flag for BuildKit-compatible source policies in buildah build.
+14 moreshow less
Adds FROM --after flag support for declaring explicit stage dependencies in Dockerfiles.
Enables building Windows container images.
Adds --amend and --replace flags to manifest create for handling non-list images.
Adds RunOptions.ValidExitCodes and --valid-exit-codes flag to buildah run for specifying acceptable exit codes.
Adds support for preserving and labeling intermediate stage images during multi-stage builds.
Makes COPY --exclude patterns context-relative.
Respects compression_format from containers.conf in push, build --cache-to, and commit.
Ignores .containerignore for git repositories in ADD instructions.
Removes Cgroups v1 support.
Removes CNI networking support.
Removes slirp networking support.
Groups global commands in global help output for improved CLI discoverability.
Introduces deterministic network ordering.
Changes Configuration File lookup behavior; callers reading config files should refer to the updated containers-config(5) specification.
19 details in Everything
└──▷ BREAKING ON UPGRADE
!Cgroups v1 support has been removed; setups relying on cgroupsv1 will no longer work.
!CNI networking support has been removed; setups using CNI will break on upgrade.
!slirp networking support has been removed; setups relying on slirp will break on upgrade.
!Configuration File lookup behavior has changed; callers of functions that read configuration files must refer to containers-config(5) for updated details.
Kata Containers 3.31.0 adds coldplug GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. support, HTTP health probes, and genpolicy env source from metadata labels.
└──▷ GET THIS VERSION
$ git clone --branch 3.31.0 https://github.com/kata-containers/kata-containers.git
# already have the repo? check out this version:$ git checkout 3.31.0
runtime-rs: add CCW network hotplug capability for QEMUQEMUAn open-source machine emulator and virtualizer that lets software run a guest OS or CPU architecture on a different host, giving cyber tools an isolated, inspectable execution environment without dedicated hardware. VMs
kata-deploy now exposes HTTP health probes at /healthz and /readyz endpoints
genpolicy supports environment variable values sourced from metadata.labels
runtime-rs adds coldplug GPU support
4 details in Everything
1 more release in this issue
· 2026-05-02 → 2026-05-19
runtime-rs gains vCPU thread pinning, splits irqchip via Dragonball userspace IOAPIC, and supports containerd v4 config
└──▷ GET THIS VERSION
$ git clone --branch 3.30.0 https://github.com/kata-containers/kata-containers.git
# already have the repo? check out this version:$ git checkout 3.30.0
runtime-rs now includes vCPU thread pinning support for finer control over VM CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. allocation.
dragonball gains a userspace IOAPIC implementation to enable the split irqchip architecture.
kata-deploy adds support for containerd config version 4, removing compatibility gaps with newer containerd setups.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!agent has removed the standard-oci-runtime feature, dropping support for that runtime mode in favor of the standard OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. implementation.
kubescape v4.0.7 adds ControlInput CRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it., TLS env var support, and expired exception filtering
└──▷ GET THIS VERSION
$ git clone --branch v4.0.7 https://github.com/kubescape/kubescape.git
# already have the repo? check out this version:$ git checkout v4.0.7
└──▷ TRY IT
Run kubescape with custom TLS certificates for the local HTTP handler using environment variables.
Adds --helm-values-overrides to kubescape scan for custom Helm values and enables Kustomize-Helm rendering
└──▷ GET THIS VERSION
$ git clone --branch v4.0.6 https://github.com/kubescape/kubescape.git
# already have the repo? check out this version:$ git checkout v4.0.6
--helm-values-overrides flag on kubescape scan accepts a JSON string of Helm values to override during local cluster scans
Enables automatic detection and rendering of Kustomize directories that include helmCharts blocks, allowing mixed manifests to be scanned without manual conversion
New rootless gvisor-tap-vsock driver, custom logging attributes, Windows Unix socket, docker ps --format .HealthStatus, and time namespace feature flag in 29.5.0
gvisor-tap-vsock is now the default rootless network driver.
Add new default gvisor-tap-vsock network driver for Rootless mode.
Enable private time namespace for containers by default on supported kernels.
Local logging driver now supports custom attributes via label, label-regex, env, env-regex, and tag log options.
Windows daemon now supports listening on a Unix socket (-H unix://...) with optional group-based access control via --group.
+2 moreshow less
docker ps --format now supports a .HealthStatus placeholder to print container health state (starting, healthy, unhealthy) as a dedicated field.
Add time-namespaces feature flag to disable time-namespaces.
7 details in Everything
└──▷ BREAKING ON UPGRADE
!slirp4netns is no longer installed via Docker packaging; users should prefer gvisor-tap-vsock.
kube-bench v0.15.5 adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmark support for k3s 1.9 and GKEGKEGoogle Kubernetes Engine, Google's managed Kubernetes service, which lets cyber tools run containerized workloads without managing the underlying cluster infrastructure. 1.9.
└──▷ GET THIS VERSION
$ git clone --branch v0.15.5 https://github.com/aquasecurity/kube-bench.git
# already have the repo? check out this version:$ git checkout v0.15.5
Adds k3s-cis-1.9 CIS benchmark checks for auditing k3s clusters against the CIS 1.9 profile.
Adds GKE 1.9 benchmark checks for auditing Google Kubernetes Engine clusters against the gke-1.9 profile.
$ git clone --branch v0.19.3 https://github.com/cilium/cilium-cli.git
# already have the repo? check out this version:$ git checkout v0.19.3
└──▷ TRY IT
Avoid false-positive log alerts from pre-test noise by scoping log checks to only the test window.
$ cilium connectivity test --log-check-only-test-time=true
Automatically clean up connectivity test artifacts after a run to keep the cluster tidy.
$ cilium connectivity test --cleanup
Adds --log-check-only-test-time flag to connectivity tests to check only logs written after tests start, reducing false positives.
Adds --cleanup flag to remove connectivity test artifacts after a test run.
Adds --exit-zero-on-failure flag to connectivity tests to return exit code 0 even on test failure.
Sysdumps now additionally collect Cluster Mesh certificate generation artifacts.
Sysdumps now collect Cilium L2 Announcement Policies.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The enable-encryption-strict-mode, encryption-strict-mode-cidr, and encryption-strict-mode-allow-remote-node-identities options have been removed (previously deprecated).
!The v2alpha1CiliumNodeConfig API has been removed; use the v2 API promoted in Cilium 1.16.
May 31 20262 releases · 2026-05-24 → 2026-05-31Stable
Minimus adds minicli CLI for managing private images as code and granular supply chain policy controls.
Introduces minicli, a new CLI command for defining, building, and managing private image configurations as code.
Adds granular supply chain policy controls allowing configuration of thresholds for cooling-off periods, popularity, typosquattingtyposquattingUsing a name close to a trusted domain or software package to catch spelling mistakes. Attackers use it to lure people or installers to a malicious lookalike. risk, and suspicious version releases.
2 details in Everything
1 more release in this issue
· 2026-05-24 → 2026-05-31
Dashboard cards now respect exemptions to show only actionable findings.
Dashboard cards and slide-over panels now exclude exempted assets for public assets, critical/exploited vulnerabilities, overly permissive privileges, admin privileges, privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources., attack pathsattack pathsA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately., and failed findings.
OpenSandbox execd v1.0.17 adds EXECD_BOOTSTRAP_PRE_SCRIPT env var for pre-bootstrap seeding
└──▷ GET THIS VERSION
$ git clone --branch docker/execd/v1.0.17 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/execd/v1.0.17
15 more releases in this issue
· 2026-05-06 → 2026-05-19
Adds Sandbox metadata PATCH endpoint and stable diagnostics CLI; unblocks event loop with concurrency knobs.
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.14 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.14
Adds PATCH /sandboxes/{sandboxId}/metadata endpoint for incremental label updates: pass a value to set/update, pass null to delete a key
Adds osb diagnostics logs|events subcommands to CLI/SDK with required scope argument; server returns 501 DIAGNOSTICS_NOT_IMPLEMENTED until stable backend lands
OpenSandbox Go SDK v1.0.1 adds UploadFiles, sets User-Agent header by default, and enforces TLS 1.2 minimum.
└──▷ GET THIS VERSION
$ git clone --branch sdks/sandbox/go/v1.0.1 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout sdks/sandbox/go/v1.0.1
Adds UploadFiles method on the Sandbox type to perform multipart uploads against /files/upload
Sets OpenSandbox-Go-SDK/1.0.1User-Agent header on all outgoing requests automatically
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Sandbox.Close / SandboxManager.Close now return error to satisfy io.Closer
!TLS 1.2 minimum for SDK-created HTTP clients, enforcing the NIST 2030 minimum certificate key/hash length policy
OpenSandbox JS SDK v0.1.7 adds platform constraints, PVC storage config, secure endpoints, signed URLs, pause/resume, snapshots, and metadata patching.
└──▷ GET THIS VERSION
$ git clone --branch js/sandbox/v0.1.7 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout js/sandbox/v0.1.7
└──▷ USE IT
Request a sandbox running on a specific platform, such as Windows, with auto-provisioned storage.
OpenSandbox k8s/controller/v0.2.0 adds pause/resume, public snapshot API, and secure runtimes.
└──▷ GET THIS VERSION
$ git clone --branch k8s/controller/v0.2.0 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout k8s/controller/v0.2.0
Implements pause and resume operations for batchsandbox instances backed by rootfs snapshots
Adds support for a public snapshots API on the Kubernetes runtime
Enables auto-assignment of pools for batchsandbox workloads
Adds per-volume API fields to automatically create or delete PVCs and Docker volumes
Supports GVisorGVisorA user-space kernel written in Go by Google that intercepts and handles system calls on behalf of a container, sandboxing it without needing a full VM. and Kata Containers as secure-container RuntimeClass options
+4 moreshow less
Adds scaleStrategy configuration to control pool scaling behavior
Allows overriding the api_key environment variable via Helm values
Introduces a signed endpoint for secure route access per OSEP-0011
Adds a recycle handler for pool management and optimizes pool controller synchronization
OpenSandbox 0.2.0 adds pause/resume capabilities with rootfs snapshot support for sandboxed workloads.
└──▷ GET THIS VERSION
$ git clone --branch helm/opensandbox/0.2.0 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout helm/opensandbox/0.2.0
└──▷ TRY IT
Pause a running sandbox to preserve its root filesystem state for later inspection.
OpenSandbox v0.2.0 adds pause/resume with rootfs snapshots, public snapshot API, gVisorgVisorA user-space kernel written in Go by Google that intercepts and handles system calls on behalf of a container, sandboxing it without needing a full VM./Kata RuntimeClass support, and per-volume PVC/Docker volume management.
└──▷ GET THIS VERSION
$ git clone --branch k8s/task-executor/v0.2.0 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout k8s/task-executor/v0.2.0
Adds pause and resume operations with rootfs snapshot support to suspend and restore task execution state
Adds support for the public snapshots API on the Kubernetes runtime for programmatic access to sandbox disk images
Adds gVisor and Kata RuntimeClass support via the new secure-container feature for enhanced isolation
Enables automatic PVC and Docker volume lifecycle management through per-volume API fields
Adds environment variable override capability for api_key via the Helm chart and server configuration
OpenSandbox CLI v0.1.1 introduces stable osb diagnostics commands with scoped scope and structured outputstructured outputForcing a model's response to match a given format or JSON schema, so software can parse it reliably instead of hoping the text is well formed. modes.
└──▷ GET THIS VERSION
$ git clone --branch cli/v0.1.1 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout cli/v0.1.1
Adds stable osb diagnostics logs and osb diagnostics events subcommands that require an explicit diagnostic scope argument and support table, json, yaml, and raw output formats
Migrates osb devops logs and osb devops events to deprecated compatibility wrappers while preserving existing --tail, --since, and --limit flag behaviors
OpenSandbox egress v1.0.11 adds connection_strategy=lazy and OPENSANDBOX_EGRESS_MITMPROXY_SSL_INSECURE env var
└──▷ GET THIS VERSION
$ git clone --branch docker/egress/v1.0.11 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/egress/v1.0.11
Adds connection_strategy=lazy to mitmproxy to defer upstream connections until the full request is received, avoiding useless connections for intercepted or filtered requests.
Adds OPENSANDBOX_EGRESS_MITMPROXY_SSL_INSECURE environment variable (default false) to skip upstream TLS certificate verification when set to true, resolving IP address mismatch errors for direct IP connections.
New metadata patch and stable diagnostics APIs in the OpenSandbox Python SDK v0.1.9
└──▷ GET THIS VERSION
$ git clone --branch python/sandbox/v0.1.9 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout python/sandbox/v0.1.9
Adds JSON merge-patch support for sandbox metadata via Sandbox / SandboxManager flows
OpenSandbox v1.0.11 adds sandbox metadata patch and stable Diagnostics API to the Kotlin SDK
└──▷ GET THIS VERSION
$ git clone --branch java/sandbox/v1.0.11 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout java/sandbox/v1.0.11
Adds metadata patch support via a new API in the Kotlin SDK to apply JSON merge-patch updates (including delete semantics for null values) on Sandbox and SandboxManager objects
Exposes stable Diagnostics API endpoints getDiagnosticLogs and getDiagnosticEvents on Sandbox and SandboxManager requiring a diagnostic scope argument
$ git clone --branch python/sandbox/v0.1.8 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout python/sandbox/v0.1.8
└──▷ TRY IT
Enable Redis-backed distributed sandbox pools in a Python client by installing the optional dependency.
$ pip install opensandbox[pool-redis]
Request secure access for a new sandbox to get signed, short-lived endpoint URLs.
Add first-class Python sandbox pool support for both async and sync clients with single-node in-memory and optional Redis-backed distributed stores via opensandbox[pool-redis].
Add snapshot APIs (create, get, list, delete) to the Python SDK, enabling creation of new sandboxes from a snapshotId.
Add secure endpoint access surfaces allowing secureAccess on sandbox creation and signed endpoint retrieval for short-lived sandbox route access without sharing static tokens.
OpenSandbox execd v1.0.15 adds EXECD_ACCESS_TOKEN env var for server access tokenaccess tokenA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. configuration.
└──▷ GET THIS VERSION
$ git clone --branch docker/execd/v1.0.15 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/execd/v1.0.15
ServerAccessToken can now be set via EXECD_ACCESS_TOKEN environment variable as an alternative to the --access-token CLI flag.
New snapshot lifecycle APIs, signed endpoint URLs, and pause/resume controls in OpenSandbox server v0.1.13
└──▷ GET THIS VERSION
$ git clone --branch server/v0.1.13 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout server/v0.1.13
└──▷ TRY IT
Generate a temporary, signed token for internal route access within a sandbox.
Adds snapshot lifecycle management with create/get/list/delete APIs and sandbox restore via snapshotId
Adds GET /sandboxes/{sandboxId}/endpoints/{port}?expires=<unix_seconds> endpoint for SHA256SHA256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data.-signed, time-limited route access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions.
Adds /pause and /resume endpoints with SandboxSnapshot CRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. support for Kubernetes pause/resume functionality
Adds OPENSANDBOX_SERVER_API_KEY environment variable to override the server.api_key TOML config setting
OpenSandbox v1.0.10 adds snapshot lifecycle, secure endpoint access, signed API, Windows support, PVC auto-provisioning, custom execd port, and distributed pool.
└──▷ GET THIS VERSION
$ git clone --branch java/sandbox/v1.0.10 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout java/sandbox/v1.0.10
└──▷ USE IT
Create a sandbox using a previously saved snapshot ID instead of booting from scratch.
shell
val sandbox = Sandbox.create(client, SnapshotRequest("snapshotId-abc123"))
Enable secure access for a Kubernetes gateway sandbox to propagate and redact sensitive headers.
shell
val sandbox = Sandbox.builder()\n .secureAccess(true)\n ...\n .build()
Request a time-limited route token using the new signed endpoint API.
shell
val token = client.getSignedEndpoint(tokenRequest)
Adds snapshotId to Kotlin SDK for sandbox creation from snapshots and full CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. lifecycle flows (create/get/list/delete).
Adds secureAccess opt-in flag to Kotlin Sandbox creation for Kubernetes gateway mode with header propagation and redaction.
Adds signed endpoint retrieval API (OSEP-0011) via the Kotlin SDK for time-limited route tokens instead of static credentials.
Adds Windows OS platform support in Kotlin SDK models and converters.
Adds PVC auto-provisioning fields to Kotlin sandbox models for automatic volume creation on startup.
+2 moreshow less
Adds execdPort(port: Int) method to Sandbox.Connector Builder/Resumer to target a custom execd port other than default 44772.
Adds distributed SandboxPool support via the optional sandbox-pool-redis module for shared state coordination.
OpenSandbox ingress v1.0.7 adds multi-namespace watching, signed URL verification via --secure-access-keys, and auto log rotation
└──▷ GET THIS VERSION
$ git clone --branch docker/ingress/v1.0.7 https://github.com/opensandbox-group/OpenSandbox.git
# already have the repo? check out this version:$ git checkout docker/ingress/v1.0.7
--secure-access-keys flag for verified access to sandboxes marked with opensandbox.io/secure-access annotation
Multi-namespace support: ingress now watches sandbox CRs across all namespaces instead of a single one (with --namespace deprecated)
Automatic log rotation for file outputs using lumberjack (100MB, 30d retention, 10 backups default)
$ git clone --branch v0.2.2 https://github.com/TencentCloud/CubeSandbox.git
# already have the repo? check out this version:$ git checkout v0.2.2
└──▷ TRY IT
Override MySQL and Redis ports for a non-default deployment without hand-editing cubemaster.yaml.
$ # In your .env file, set the desired ports before running install.sh:
CUBE_SANDBOX_MYSQL_PORT=3307
CUBE_SANDBOX_REDIS_PORT=6380
bash install.sh
Changes the default sandbox exposed port to 49983 to match the E2B sandbox protocol, with CubeMaster as the single authoritative source of default exposed ports.
Adds an optional cmd_timeout field in the storage plugin TOML config so operators can raise the cubelet command timeout beyond the previous hardcoded 3 s limit without recompiling.
Adds richer failure diagnostics for newExt4RawByReflinkCopy, including elapsed time, target/base file sizes, and free space in structured log output.
Adds __CUBE_SANDBOX_MYSQL_PORT__ and __CUBE_SANDBOX_REDIS_PORT__ placeholders to cubemaster.yaml, substituted by install.sh from .env to support non-default MySQL/Redis ports.
Introduces five AI reviewer agents (code quality, performance, security, test coverage, documentation accuracy) with automated PR review, duplicate issue detection, and issue label triage workflows.
+3 moreshow less
Adds comment-issue subcommand to gh.sh for posting issue comments via stdin heredoc.
Documents network port allocation ranges (10000–19999, 20000–29999, 30000–65535) in docs/architecture/network.md (EN & ZH).
Adds new bilingual community doc sections for troubleshooting, use-cases, and integrations in VitePress, with a GitHub ActionsGitHub ActionsGitHub's built-in CI/CD system that runs automated workflows triggered by repository events, letting cyber tools automate testing, building, and releasing without managing separate pipeline infrastructure. workflow enforcing bilingual parity.
8 details in Everything
└──▷ BREAKING ON UPGRADE
!The default sandbox exposed port is changed from 8080/32000 to 49983; any client or firewall rule targeting the old default ports will stop working after upgrade.
2 more releases in this issue
· 2026-05-07 → 2026-05-18
CubeSandbox v0.2.1 ships a first-party Python SDK, faster startup via skipped SHA256SHA256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. checks, and improved template-watch CLI output.
└──▷ GET THIS VERSION
$ git clone --branch v0.2.1 https://github.com/TencentCloud/CubeSandbox.git
# already have the repo? check out this version:$ git checkout v0.2.1
Adds official Python SDK (cubesandbox v0.1.0) with full sandbox lifecycle methods (create, connect, pause, kill, list, health), streaming code execution via run_code(), and filesystem access via files.read().
Supports allow_internet_access and explicit allow/deny network policy lists as first-class parameters in the Python SDK.
Supports CUBE_PROXY_NODE_IP for TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. direct-connect transport via IPOverrideTransport, bypassing DNS in the Python SDK.
New EnsureKernelFilePresent (copy-if-missing fast path) and RefreshKernelFile (force-refresh with verification) split in Cubelet dramatically reduces startup latency on hosts with many templates by skipping per-boot SHA256 checks.
Skips redundant docker pull in CubeMaster when the source image already exists locally, removing unnecessary registry round-trips during template builds.
+5 moreshow less
New cubemastercli tpl watch phase-oriented output replaces full-status dumps with concise [N/7] PHASE progress=… distribution=… lines, also applied to the redo watch path.
Adds 12 worked examples and a benchmark.py for concurrent create/delete performance testing in the Python SDK.
Promotes cube-bench to a standalone Go module at examples/cube-bench with its own Makefile.
Adds DCO check CI workflow that blocks PR merges on missing Signed-off-by trailers.
Adds GitHub ARC (Actions Runner Controller) support for kernel and package build workflows.
CubeSandbox v0.2.0 adds a Web Management Console and PVM deployment mode so sandboxes run on ordinary cloud servers.
└──▷ GET THIS VERSION
$ git clone --branch v0.2.0 https://github.com/TencentCloud/CubeSandbox.git
# already have the repo? check out this version:$ git checkout v0.2.0
└──▷ HOW TO FIND IT
Access the new Dashboard to monitor sandbox/node status and manage API keys without touching the CLI.
📍In the CubeAPI web UI, navigate to the Dashboard to view cluster overview, manage templates, and configure API keys under the API Key Management section.
New Web Management Console (Dashboard) with cluster overview, node/sandbox status, template management, and API key management, backed by new CubeAPI web endpoints.
New PVM (Pagetable-based Virtual Machine) deployment mode lets ordinary cloud servers run CubeSandbox without bare-metal or nested virtualization.
Adds --dns flag to cubemastercli template for specifying a custom DNS server address when creating a template image.
Falco 0.44.0 adds string comparator modifiers, capture stop conditions, list transformer exceptions, and drops gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication./gVisorgVisorA user-space kernel written in Go by Google that intercepts and handles system calls on behalf of a container, sandboxing it without needing a full VM./legacy BPFBPFA Linux kernel virtual machine that lets programs attach small, sandboxed bytecode filters to kernel hooks — syscalls, network events, tracepoints — so cyber tools can observe or redirect kernel behaviour without writing a kernel module. support.
└──▷ GET THIS VERSION
$ git clone --branch 0.44.0 https://github.com/falcosecurity/falco.git
# already have the repo? check out this version:$ git checkout 0.44.0
└──▷ USE IT
Cap a capture file at 10,000 events to prevent runaway disk usage during incident capture.
yaml
capture_events: 10000
capture_filesize: 100
Adds oneof, allof, and anyof string comparator modifiers to the rule engine for richer multi-value matching in conditions.
Adds capture_events and capture_filesize stop conditions to cap capture file size or event count via config.
Adds validation for unknown keys in rules, surfacing misconfigured or misspelled rule fields at load time.
Adds support for list transformer exceptions in rule exception handling.
Enables HTTP output, webserver, and metrics on macOS and Windows.
+2 moreshow less
Adds backslash escaping support to the -o key-path parser, allowing literal dots and brackets in YAML key names (e.g., -o 'my\.dotted\.key=val').
Adds kernel iterator metrics support for deeper eBPFeBPFA Linux technology for running verified programs inside the kernel without changing its source. Tools use it to observe processes, enforce rules and process network traffic. performance observability.
7 details in Everything
└──▷ BREAKING ON UPGRADE
!gRPC output and gRPC server support have been removed; any deployment relying on Falco's gRPC output channel will stop working.
!gVisor engine support has been dropped; rules and configs targeting the gVisor source will no longer function.
!The legacy BPF probe has been removed; setups using the legacy BPF driver must migrate to the modern eBPF probe.
Define a rule that triggers only when multiple specific strings match using the new modifiers.
yaml
rules:
- rule: MultiMatchRule
condition: evt.type = open and proc.name oneof ("bash", "sh")
Adds oneof, allof, anyof modifiers to the string comparator in rules for complex logic
Adds capture_events and capture_filesize as stop conditions for capture file actions
Enables http_output, webserver, and metrics features on macOS and Windows
Adds support for list transformer exception in the userspace engine
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Drops gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. output and server support, removing related configuration keys and CLI flags
!Drops gVisorgVisorA user-space kernel written in Go by Google that intercepts and handles system calls on behalf of a container, sandboxing it without needing a full VM. engine support, preventing execution on containers using this runtime
!Drops legacy BPFBPFA Linux kernel virtual machine that lets programs attach small, sandboxed bytecode filters to kernel hooks — syscalls, network events, tracepoints — so cyber tools can observe or redirect kernel behaviour without writing a kernel module. probe support, requiring a new kernel driver or eBPM-based setup
Exabeam May 2026 adds PingOne/S2W/Workday collectors, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. case management, and Post-Default enrichers.
Adds PingOne Identity Cloud Collector for user activity audit logs
Adds S2W Threat Intelligence Cloud Collector for threat intel ingestion
Adds Workday Cloud Collector for user activity logs from Workday API
Adds OAuth2.0 JWT Grant authentication support to the REST API Cloud Collector
Adds Pre-Default and Post-Default ordering options for custom enrichers in Log Stream
+9 moreshow less
Adds case creation, update, note creation, and alert update capabilities to the Exabeam MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface.
Adds a platform-wide global search bar accessible via the Navigation Center
Adds the Manage All Schedule Reports permission level for administrators
Adds Exabeam Nova auto-creation panel alongside Basic panel in Custom Visualization authoring
Adds the GetContextAttribute() function for precise context table queries in analytics rules
Adds public/private visibility toggle for saved searches in Threat Center
Adds sorting by title, creator, and modification date to saved searches
Adds filtering of field names in the Search Results Summary list
Adds NIST 800-53NIST 800-53A catalog of security and privacy controls for U.S. federal information systems, published by NIST. Cyber tools cite it to map their findings or features to a recognized compliance framework., NIIST CSF, and NIIS2 compliance framework support in Outcomes Navigator
14 details in Everything
└──▷ BREAKING ON UPGRADE
!The following pre-built enrichment rules have been removed: UID to User Lookup, EmployeeNumber to User Lookup, Email to User Enricher-1, Destination Email to Destination User Enricher-1, Email to User Enricher-2, Destination Email to Destination User Enricher-2, User SID to User Lookup, Microsoft User UPN to User/Email Enricher, CrowdStrike Asset ID to User Lookup, Discard EM External, Discard EM Ephemeral, Discard Exabeam Users
!The following pre-built analytics rules have been removed: Cntx-SA-ECrit, Cntx-PC-ECrit-CS, Cntx-PC-ECrit-Server, NumDCP-Network-DEC-SE-DE, NumDCP-Network-DIPC-DP-DIP, NumDCP-Network-DIPC-DP-DIP-SE, NumDCP-Network-DIPC-DP-DIP-SIP, NumDCP-Network-DIPC-O-DIP-SE, NumDCP-Network-DIPC-O-DIP-SIP, NumDCP-Network-DIPC-O-DIP-U, NumDCP-Network-DIPC-SE-DIP, NumDCP-Network-DIPC-U-DIP, Prof-Network-ToExtIP-O-DP, Prof-Network-ToExtIP-O-SE, Prof-Network-ToExtIP-O-SZ
Databricks makes Lakeflow Connect query-based connectors GA for Oracle, Teradata, SQL Server, MySQL, MariaDB, PostgreSQL, and Lakehouse FederationLakehouse FederationA data architecture pattern that lets a single query engine read from multiple external data sources—databases, data lakes, warehouses—without moving or copying the data, reducing pipeline complexity for tools that need broad data access. sources.
Adds Lakeflow Connect query-based connectors as a general capability for ingesting data from databases using cursor columns without CDC or an ingestion gateway.
Adds support for Oracle, Teradata, SQL Server, MySQL, MariaDB, and PostgreSQL as source systems for Lakeflow Connect query-based connectors.
Adds support for all Lakehouse Federation data sources using foreign catalog ingestion in Lakeflow Connect query-based connectors.
3 details in Everything
43 more releases in this issue
· 2026-05-05 → 2026-05-29
Lakeflow Designer adds bidirectional AI descriptions, N-way Combine, custom SQL joins, and multi-modalmulti-modalAble to work with more than one type of input or output, such as text, images and audio. A multimodal model can combine information across those formats. outputs.
Adds bidirectional AI-generated descriptions: editing an operator's description reconfigures the operator
Adds N-way Combine support to the Combine operator for any number of input tables
Adds custom join conditions via UI arrow click allowing manual SQL entry or edited AI description
Enables multi-modal output rendering (plots, HTML, images) directly in the preview pane
Makes the output panel configurable with resizable input/output views
+2 moreshow less
Adds inline parameter examples for SQL and Python operators
Displays a one-line Genie Code change summary above the input box
Cross-engine ABACABACAttribute-based access control, where rules evaluate facts about the user, resource and request. Access can depend on conditions such as department, data sensitivity or device status. allows external engines to read Unity Catalog managed tables with server-side row and column security
Databricks Lakeflow now supports real-time mode via the new update_flow decorator and API in Public Preview.
Adds the update_flow decorator for Spark Declarative Pipelines on Lakeflow to enable real-time mode with end-to-end latency as low as five milliseconds
Enables stateful aggregations without requiring a watermark in the new real-time mode
Databricks enables automatic syncing of Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. identities to workspaces without SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave..
Unity Catalog now generally available for managed and foreign Iceberg tables, plus Iceberg v3 features like deletion vectors.
Supports creating and managing Apache IcebergApache IcebergAn open table format for large analytic datasets, maintained by the Apache Software Foundation, that gives cyber tools reliable schema evolution, time-travel queries, and atomic commits on object storage or HDFS. tables within Unity Catalog using Databricks Runtime, Databricks SQL, or external Iceberg-compatible engines
Enables reading Iceberg tables managed by external catalogs (AWS Glue, Hive metastoreHive metastoreA central metadata repository, part of the Apache Hive project, that stores schema and location information for distributed data sets so query engines can discover and read structured data without hardcoding paths., Snowflake Horizon Catalog) through Lakehouse FederationLakehouse FederationA data architecture pattern that lets a single query engine read from multiple external data sources—databases, data lakes, warehouses—without moving or copying the data, reducing pipeline complexity for tools that need broad data access.
Adds support for Iceberg v3 features including deletion vectors, the VARIANT data type, and row lineage on managed Delta Lake, managed Iceberg, and foreign Iceberg tables
Beta support for authenticating as a service principal via OAuth U2MOAuth U2MOAuth flow in which a human user delegates scoped access to a service on their behalf, letting cyber tools act with the user's permissions without handling raw credentials. flow
Adds OAuth U2M flow to authenticate as a service principal's identity instead of the user account.
Databricks adds Custom Model Serving (Beta) to serve custom and fine-tuned LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. using vLLM.
Enables serving of multimodalmultimodalAble to work with more than one type of input or output, such as text, images and audio. A multimodal model can combine information across those formats. models via the new Custom Model Serving capability
Supports PEFTPEFTAdapting a pretrained model by training only a small subset of its parameters or small added modules. Methods such as LoRA reduce the memory and storage needed for fine-tuning. recipes for model fine-tuning through Custom Model Serving (Beta)
Google Gemini 3.5 Flash added as a Databricks-hosted model accessible via Foundation Model APIsFoundation Model APIsHosted interfaces to large pretrained AI models—such as those from OpenAI, Anthropic, or Google—that let cyber tools query reasoning or language capabilities without training or hosting a model themselves.
Adds Google Gemini 3.5 Flash to Model Serving as a Databricks-hosted model.
Enables access to Google Gemini 3.5 Flash through Foundation Model APIs.
Lakeflow Designer now enabled by default with AI operator search, configurable sample size, Git integration, and user-defined operators.
└──▷ HOW TO FIND IT
Export your current visual data prep flow for version control or sharing.
📍File › Export
Enables Lakeflow Designer by default for all free edition, premium, and enterprise tier workspaces
Adds AI operator search to the operator panel, suggesting operators based on intent (e.g., typing average by month surfaces Aggregate operator)
Adds Configurable sample size allowing users to set the number of sample rows for each operator, with limits remembered per operator
Enables exporting, cloning, and importing visual data prep files via File > Export, File > Clone, and storage in Git folders
Introduces User-defined operators (Public Preview) supporting uc-udf, uc-udtf, and python-run-function types to extend Lakeflow Designer with custom business logic
HIPAAHIPAAA US federal law enacted in 1996 that sets privacy and security requirements for protected health information, giving cyber tools a compliance baseline to enforce or audit against. compliance support added to Databricks Add-in for Excel in Public Preview
Databricks Add-in for Excel now supports workspaces with HIPAA compliance across all supported regions.
Public Preview of App Telemetry for Databricks Apps allowing traces, logs, and metrics to be persisted to Unity Catalog via OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor..
Adds the ability to collect traces, logs, and metrics from Databricks Apps using the OpenTelemetry protocol.
Enables persistence of collected telemetry data into Unity Catalog tables.
Beta allows creating standalone pipelines (SQL/Python) from notebooks on serverless general compute
Standalone pipelines (renamed from pipelines on Databricks SQL), including materialized views and streaming tables, can now be created from a notebook running on serverless general compute
Graviton (Arm64) instance types are now available for Databricks workspaces using the compliance security profile with FedRAMP ModerateFedRAMP ModerateA US government authorization tier requiring cloud services to meet a defined set of NIST 800-53 controls before federal agencies can use them, giving cyber tools a pre-vetted compliance baseline for government contracts., IRAP, or CCCS Medium standards.
Databricks adds Automatic Identity Management for syncing users/groups from Microsoft Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. and Okta
Introduces Automatic identity management feature to sync users and groups from external identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems.
Adds Public Preview support for Microsoft Entra ID, including service principals and nested groups
Alibaba Cloud Qwen3.5 122B A10B model now available via Foundation Model APIsFoundation Model APIsHosted interfaces to large pretrained AI models—such as those from OpenAI, Anthropic, or Google—that let cyber tools query reasoning or language capabilities without training or hosting a model themselves. in Public Preview
Databricks introduces a Beta Smartsheet connector in Lakeflow Connect, enabling users to ingest data from Smartsheet sheets directly into their Databricks environment.
Google SecOps expands log ingestion support with new parsers for dozens of vendors including Arista, Microsoft, SAP, and Tenable.
Adds parser documentation and support for ingesting Arista VeloCloud SD-WANSD-WANSoftware-defined wide-area networking: an approach that decouples WAN routing logic from physical hardware, letting operators centrally control traffic paths across MPLS, broadband, and LTE links to reduce cost and improve resilience. logs
Adds parser documentation and support for ingesting Microsoft Defender for Endpoint logs
Adds parser documentation and support for ingesting PTC Windchill logs
Adds parser documentation and support for ingesting Riverbed SteelHead logs
Adds parser documentation and support for ingesting Sangfor Proxy logs
+44 moreshow less
Adds parser documentation and support for ingesting SAP BTP logs
Adds parser documentation and support for ingesting SAP NetWeaver logs
Adds parser documentation and support for ingesting SAP SM20 logs
Adds parser documentation and support for ingesting SAP SuccessFactors logs
Adds parser documentation and support for ingesting SAP Sybase ASE logs
Adds parser documentation and support for ingesting Saviynt Enterprise Identity Cloud logs
Adds parser documentation and support for ingesting SecureLink logs
Adds parser documentation and support for ingesting Semperis DSP logs
Adds parser documentation and support for ingesting Sonrai Security logs
Adds parser documentation and support for ingesting SOTI MobiControl logs
Adds parser documentation and support for ingesting Splunk Attack Analyzer logs
Adds parser documentation and support for ingesting SpyCloud logs
Adds parser documentation and support for ingesting Stealthbits Audit logs
Adds parser documentation and support for ingesting Stealthbits StealthDEFEND logs
Adds parser documentation and support for ingesting STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. Threat Intelligence logs
Adds parser documentation and support for ingesting Swift Alliance Messaging Hub logs
Adds parser documentation and support for ingesting Symantec Messaging Gateway logs
Adds parser documentation and support for ingesting Symantec Security Analytics logs
Adds parser documentation and support for ingesting Tableau logs
Adds parser documentation and support for ingesting Talon logs
Adds parser documentation and support for ingesting TCPWave DDI logs
Adds parser documentation and support for ingesting Teleport Access Plane logs
Adds parser documentation and support for ingesting Tenable Audit logs
Adds parser documentation and support for ingesting Tenable CSPMCSPMCloud security posture management, checking cloud resources for risky settings and policy violations. It helps teams find exposed services, overly broad permissions and other configuration gaps. logs
Adds parser documentation and support for ingesting Teradata Database logs
Adds parser documentation and support for ingesting Terraform Enterprise logs
Adds parser documentation and support for ingesting Tetragon eBPFeBPFA Linux technology for running verified programs inside the kernel without changing its source. Tools use it to observe processes, enforce rules and process network traffic. audit logs
Adds parser documentation and support for ingesting ThreatLocker Platform logs
Adds parser documentation and support for ingesting ThreatX WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. logs
Adds parser documentation and support for ingesting Tintri logs
Adds parser documentation and support for ingesting Trend Micro Apex Central logs
Adds parser documentation and support for ingesting uberAgent logs
Adds parser documentation and support for ingesting Ubika WAF logs
Adds parser documentation and support for ingesting UKG logs
Adds parser documentation and support for ingesting UPX AntiDDoS logs
Adds parser documentation and support for ingesting Verba Recording System logs
Adds parser documentation and support for ingesting Vercel WAF logs
Adds parser documentation and support for ingesting Virtru Email Encryption logs
Adds parser documentation and support for ingesting WatchGuard EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. logs
Adds parser documentation and support for ingesting Windows AppLocker logs
Adds parser documentation and support for ingesting Windows Defender Antivirus logs
Adds parser documentation and support for ingesting Windows Firewall logs
Adds parser documentation and support for ingesting Windows Hyper-V logs
Adds parser documentation and support for ingesting Windows Network Policy Server logs
ClickHouse 26.5 adds filesystem table function, Paimon engine support, and various new config settings and SQL features.
└──▷ TRY IT
Query local directory contents and file metadata directly using SQL
$ SELECT * FROM filesystem('/var/log', '*.log')
Enable automatic rack detection for Kafka consumers to avoid cross-zone traffic
env
SET kafka_autodetect_client_rack = 1
Use bare function names for cleaner higher-order function calls
$ SELECT arrayMap(negate, [1, 2, 3])
filesystem table function allows querying directory structure as a SQL table
Adds kafka_autodetect_client_rack setting to discover Availability Zone via cloud facilities for librdkafka
Supports CREATE OR REPLACE MATERIALIZED VIEW with atomic swap semantics
Allows passing bare function names to higher-order functions (e.g., arrayMap(negate, ...)) without lambda wrapping
Adds tokenizeQuery and highlightQuery SQL functions for query tokenization and syntax highlighting
+4 moreshow less
Supports negative values in the LIMIT BY clause to select rows from the end of each group
Adds support for JSONPathJSONPathA query language for extracting values from JSON documents, modeled after XPath for XML. Cyber tools use it to pinpoint specific fields in structured data without parsing the whole document manually. arguments in JSON_VALUE, JSON_EXISTS, and JSON_QUERY for Tuple/Array paths
Adds Paimon, PaimonS3, PaimonAzure, PaimonHDFS, and PaimonLocal table engines with incremental read support
Adds max_bytes_ratio_before_external_join setting to control spill-to-disk threshold for hash joins
9 details in Everything
└──▷ BREAKING ON UPGRADE
!date_time_input_format and cast_string_to_date_time_mode defaults changed from basic to best_effort; strict parsing now requires explicitly setting these to basic or using compatibility.
!Tuple element name null is forbidden; ambiguous subcolumn resolution will fail if this name was previously used.
!Obsolete Arrow-based Parquet reader and writer are removed; native implementation is now enforced.
!kql table function removed; use SET dialect = 'kusto' instead.
!RANK and DENSE_RANK window functions now reject arguments (SQL standard); previously lenient behavior requires setting allow_rank_dense_rank_arguments = 1.
RunReveal adds federated S3 search, managed detections, agent metrics, and new data sources.
Adds Federated object storage search to query external S3 buckets alongside RunReveal data directly from the UI
Introduces Tier 1 managed detections with auto-triage enabled by default for high-signal findings
Makes agent metrics available including queue depth, usage, and error rate monitoring
Adds ability to disable or enable sources without deleting configuration
Enables configurable outbound webhook allowlist to restrict permitted destinations
+5 moreshow less
Adds support for Anthropic compliance activity logs as a new source
Adds Keycloak support via webhook and object storage ingestion paths
Adds Datadog Audit Trail polling source for audit activity
Ingests CrowdStrike EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. alerts as event logs
New Container Security inventory and findings overview for Kubernetes and ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. clusters
Enables automatic updates of the inventory view when selecting a cluster, cloud provider, group, or node in the container tree.
Provides filtered query capabilities for cluster resources across Kubernetes (nodes, pods, containers, images) and Amazon ECS (services, tasks, containers, images).
AWS CloudFormationAWS CloudFormationAn AWS service for declaring cloud infrastructure as code in JSON or YAML templates, letting cyber tools provision and tear down entire environments reproducibly without manual console steps. template v1.0.2376 adds a bundled pre-flight check tool for single-account deployments.
Adds a bundled precheck script to the single-account AWS CloudFormationCloudFormationAn AWS service that lets you describe and provision cloud infrastructure as declarative YAML or JSON templates, so a cyber tool can reproducibly spin up or tear down its entire AWS environment with a single API call. package to validate IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. permissions before deployment
Container Security adds Kubernetes cluster name and Cloud Account ID fields with search/filter capabilities
Adds Kubernetes cluster name, Cloud Account ID, and Cloud Instance ID as displayable fields for clusters in Container Security Inventory/Overview after upgrading to Helm chart version 3.3.8
Enables searching clusters by name and filtering by Cloud Account ID in the Container Security UI
Agentless Vulnerability & Threat Detection v1.630 upgrades Lambda to al2023 and moves scans to ECSECSElastic Common Schema, an open specification maintained by Elastic that defines a standard field naming convention for log and event data, letting cyber tools share and correlate records without per-source field mapping. Fargate, removing the 15-minute limit.
Upgrades the AVTD stack's Lambda functions from provided.al2 to provided.al2023, AWS's current long-term support custom runtime
Moves image and Lambda-function scans to AWS ECSAWS ECSAmazon's managed container orchestration service that runs Docker containers on clusters of EC2 instances or Fargate, letting tools offload scheduling, scaling, and infrastructure management to AWS. Fargate, removing the previous 15-minute scan time limit
Service Gateway Firmware 3.0.29 adds configure port list CLI command and applies CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. hardening to SSH and PAMPAMBrokering administrator sessions through a gateway instead of handing out standing credentials. Access is granted for one session, to one target, and recorded. configurations.
└──▷ USE IT
Check the current status of network ports on the appliance via the command line.
shell
configure port list
Adds configure port list CLI command to display port status
Applies CIS Section 5 security hardening for SSH, PAM, and password policies
VisionOneRole permissions updated for AWS Cloud Account template v1.0.2344
Removes iam:DeletePolicy, iam:DeleteRole, iam:DeleteRolePolicy, iam:DetachRolePolicy, and iam:UntagRole permissions from VisionOneRole to reduce privilege scope
Adds DynamoDB describe and list permissions to support additional service coverage
Endpoint Inventory adds Agent version, Agent update setting, and Agent version status columns
Adds Agent version column to Endpoint Inventory table showing unified YYYYMM agent version with hover details for Protection Module and Endpoint Sensor versions.
Adds Agent update setting column to Endpoint Inventory table displaying applied policy settings for update checks (Always, Scheduled, or Never).
Adds Agent version status column to Endpoint Inventory table indicating if current agent version is latest allowed by policy, requires update/recommended, or OS is unsupported.
Service Cloud Account for AWS v1.0.2358 adds resource tag support and restricts IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. scope for Cloud Accounts parameters.
Adds resource tag support for the AWS Partner Revenue Measurement Program.
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!The ssm:PutParameter permission in VisionOneRole is now scoped to /CAM/* parameter keys only, whereas it previously applied to Resource: "*", which may affect Cloud Accounts-related parameters if custom paths were used outside this prefix.
Trend Vision One now supports duplicating Endpoint Security Policies and viewing policies outside asset scope.
Allows users to duplicate an existing Endpoint Security Policy, keeping all settings including resources, by selecting the policy and clicking Duplicate.
Enables TrendAI Vision One™ Administrator accounts to configure permissions for TrendAI Vision One™ users to view policies outside their asset visibility scope.
Allows TrendAI Vision One™ users with permission to duplicate any visible policy they can see, though they cannot edit or delete policies outside their scope.
Adds TrafficAI Vision One management traffic proxy configuration and browser auth allow list updates
Added a traffic routing option in TrendAI Vision One that controls whether the Windows ZTSAZTSAZero Trust Security Architecture: a network access model where no user or device is trusted by default, requiring continuous verification before granting access, letting cyber tools enforce least-privilege policies across any environment. agent forwards management traffic through the XBC proxy or directly.
Updated the file property from Trend Vision One™ to TrendAI Vision One™.
Added aadcdnjp.msftauth.net and aadcdnjp.msauth.net to the allow list for browser-based authentication.
Agentless Vulnerability & Threat Detection adds scan failure rate notifications for Google Cloud.
Adds Administration → Notifications configuration path to set the scan failure rate threshold (default: 5%) and email recipients for GCP Agentless scans
Adds in-console bell notification linked to filtered Audit Logs when Agentless Vulnerability & Threat Detection scan failures exceed 5%
Adds CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. 8.1, ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 27001 2022, NIST CSFNIST CSFThe NIST Cybersecurity Framework, a set of outcomes for managing cybersecurity risk. Organizations use it to describe their current posture, priorities and improvement goals. 2.0, and SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria.:2019 standards to the Connected SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. compliance violations widget.
Supports CIS Critical Security Controls 8.1 in the connected SaaS app compliance violations widget
Sorts the connected SaaS compliance standards list by standard name
TrendAI Vision One now surfaces ZDI-powered zero-dayzero-dayA vulnerability for which defenders have had no prior opportunity to apply a fix, often because it was previously unknown. A zero-day exploit takes advantage of that gap. risk events before public CVE disclosure.
Surfaces ZDI-powered zero-day vulnerability risk events in Vulnerability Management and Threat and Exposure Management before a CVE is publicly disclosed
Generates workbench alerts for post-exploitation detection models monitoring flagged assets for suspicious behavior
Enables virtual patching through TippingPoint Intrusion Prevention rules for network-based vulnerabilities
Enables application blocking to prevent vulnerable application versions from launching on protected endpoints
Secure Access Module adds option to route Windows ZTSAZTSAZero Trust Security Architecture: a network access model where no user or device is trusted by default, requiring continuous verification before granting access, letting cyber tools enforce least-privilege policies across any environment. agent management traffic via XBC proxy or directly.
Managed ISPMISPMIdentity Security Posture Management: a discipline for continuously discovering, assessing, and remediating identity-related risks across users, accounts, and entitlements, giving cyber tools a unified view of identity exposure. introduces Exchange Online security controls, Risk Exceptions for policy bypass, and Platform Notifications.
Adds Connection Filter Should Not Bypass Spam Filtering control to block spam bypass attempts in Exchange Online
Adds Transport Rules Should Not Bypass Security Controls control to prevent transport rules from circumventing security settings
Adds Block Exchange Forwarding control to prevent email forwarding outside the organization
Adds Ensure MailTips are enabled control to mandate MailTips functionality in Outlook
Adds Ensure External Flag is visible within Outlook control to display external sender indicators
+6 moreshow less
Adds Ensure Modern Authentication is enabled control to require modern auth protocols
Adds Ensure 'AuditDisabled' organizationally is set to 'False' control to enforce auditing
Adds Ensure SMTP AUTH is disabled control to block legacy authentication methods
Adds Block Outlook External Storage Providers control to prevent saving files to external cloud storage
Adds policy exclusion capability via Risk Exceptions to suppress non-compliant flags and escalations for specific policies
Consolidates prior Escalations into Platform Notifications that do not require acknowledgment or resolution
11 details in Everything
5 more releases in this issue
· 2026-05-14 → 2026-05-28
Huntress GET /v1/organizations/{id} now returns per-product stats (SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. storage, EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. agents, ITDRITDRIdentity Threat Detection and Response: a discipline focused on detecting and responding to attacks that abuse identity systems such as Active Directory or IAM platforms, giving cyber tools visibility into credential-based intrusions. counts) for dashboards
GET Organization API endpoint returns fields that separate statistics by product (SIEM, EDR, SAT, and ITDR)
Organization API exposes SIEM storage usage data
Organization API provides EDR agent counts for unresponsive, outdated, and isolated agents
Organization API provides per-tenant ITDR identity counts
Adds Export Timeline button to ITDRITDRIdentity Threat Detection and Response: a discipline focused on detecting and responding to attacks that abuse identity systems such as Active Directory or IAM platforms, giving cyber tools visibility into credential-based intrusions. Incident Report for PDF generation.
osctrl v0.5.2 adds OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. auth for osctrl-admin, gitOps config ingestion, and a React SPA frontend.
└──▷ GET THIS VERSION
$ git clone --branch v0.5.2 https://github.com/jmpsec/osctrl.git
# already have the repo? check out this version:$ git checkout v0.5.2
Adds OIDC authentication support for the osctrl-admin web interface
Adds configuration endpoints that ingest osquery configuration via GitOpsGitOpsA practice where Git repositories serve as the single source of truth for infrastructure and application state, with automated systems continuously reconciling live environments to match what is declared in version control. workflows
Replaces the legacy admin UI with a new React single-page application at frontend/
3 details in Everything
└──▷ BREAKING ON UPGRADE
!osctrl-tls now enforces per-IP enrollment rate-limiting by default, which may block rapid bulk enrollments if not configured.
OSSEC 4.1.0 adds SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. TLS/auth, IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. whitelisting, large file (>2GB) support, and Rocky Linux 9 builds.
└──▷ GET THIS VERSION
$ git clone --branch 4.1.0 https://github.com/ossec/ossec-hids.git
# already have the repo? check out this version:$ git checkout 4.1.0
└──▷ HOW TO FIND IT
Enable authenticated SMTP alerting so OSSEC can relay alerts through a mail server that requires TLS and credentials.
📍In ossec.conf, under the <global> or <mail> block, configure SMTP TLS and authentication settings added to maild and monitord in this release. Refer to the updated maild/monitord configuration for the specific fields.
Adds SMTP TLS and authentication support to maild and monitord for authenticated email alerting.
Improves IPv6 whitelisting support in install.sh, enabling IPv6 addresses to be excluded from alerting.
Enables large file support (>2GB) in Makefile and hash operations, allowing monitoring of files previously beyond the size limit.
Increases default decoder field limit to 256 to support complex log formats.
Adds support for Rocky Linux 9 as a build and deployment platform.
Cases gain built-in security context fields and MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. structured data with dedicated filters
Adds built-in security context fields to every case for immediate investigation-ready context
Structures MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language.ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. Tactics and Techniques as fields on cases
Adds dedicated filter categories to surface cases by threat context
Case group members can now use case templates from their parent team
└──▷ HOW TO FIND IT
Allow a junior analyst (case group member) to initiate an incident using the organization's standard playbook (parent team template) without manual setup.
📍In the Tines console, navigate to the Case Group you belong to, click Create Case, and select a template from your parent team's list.
Tines 40.7.0 adds nested folders, Case permissions, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. support, and new record export/filtering capabilities.
Introduces nested folders to organize workspace content hierarchically
Adds block remote images in case content to prevent external resource loading
Enables fine-grained permissions for Cases to control access at a granular level
Adds MCP tool support for Workbench to integrate with MCP-compatible clients
Implements multiplayer editing for Cases allowing concurrent user interaction
+2 moreshow less
Adds the ability to match saved views when exporting CSVs from Cases
Enables ordering and filtering records by Updated at timestamp
Shuffle nightly adds queue management changes for on-premises deployments.
└──▷ GET THIS VERSION
$ git clone --branch nightly-12052026 https://github.com/Shuffle/Shuffle.git
# already have the repo? check out this version:$ git checkout nightly-12052026
RSigma v0.13.0 adds field observability endpoints, daemon-side TLS via --tls-cert, and post-evaluation enrichment primitives.
└──▷ GET THIS VERSION
$ git clone --branch v0.13.0 https://github.com/timescale/rsigma.git
# already have the repo? check out this version:$ git checkout v0.13.0
engine daemon now exposes unknown/missing field signals via four /api/v1/fields/* endpoints when --observe-fields is set, with three new Prometheus metrics
Server-side TLS on the daemon API listener via --tls-cert and --tls-key, gated by the daemon-tls Cargo feature and supporting mutual TLSmutual TLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. via --tls-client-ca with cross-platform cert hot-reload via POST /api/v1/reload
Post-evaluation enrichment pipeline between detection/correlation and sinks using four primitives (template, lookup, http, command) configured via --enrichers <PATH> YAML, with strict kind separation, scope filtering, and on_error policies
3 details in Everything
└──▷ BREAKING ON UPGRADE
!MatchResult and CorrelationResult are replaced by a single EvaluationResult type in the library API
!The empty attack subcommand group is removed from the CLI
4 more releases in this issue
· 2026-05-04 → 2026-05-26
$ git clone --branch v0.12.0 https://github.com/timescale/rsigma.git
# already have the repo? check out this version:$ git checkout v0.12.0
Reorganizes the CLI into five noun-led groups: engine, rule, backend, pipeline, and attack.
Adds a global --log-format <json|text> flag to all non-daemon subcommands for structured diagnostic logging.
Implements Engine::add_rules, Engine::extend_compiled_rules, and incremental RuleIndex::append_rule primitives that make bulk rule loading amortized O(1) instead of O(N²).
Adds OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools. per-request tracing spans (otlp_ingest) for both HTTP and gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. handlers in the daemon.
Publishes a new 47-page documentation site at https://timescale.github.io/rsigma/ with CLI references, API docs, and deployment guides.
RSigma v0.11.0 adds opt-in --bloom-prefilter and --cross-rule-ac flags for performance, plus new CLI/config surfaces.
└──▷ GET THIS VERSION
$ git clone --branch v0.11.0 https://github.com/timescale/rsigma.git
# already have the repo? check out this version:$ git checkout v0.11.0
└──▷ TRY IT
Enable the cross-rule Aho-Corasick prefilter in daemon mode for a large, substring-heavy rule pack to prune non-matching rules before evaluation.
$ rsigma daemon -r rules/ --cross-rule-ac
Adds --bloom-prefilter and --bloom-max-bytes <limit> CLI flags to rsigma eval and rsigma daemon to enable opt-in trigram-based bloom filter pre-filtering that skips entire detection items when trigrams cannot match.
Adds --cross-rule-ac CLI flag to rsigma eval and rsigma daemon to enable the daachorse-based cross-rule Aho-Corasick prefilter, pruning entire rules before evaluation for up to ~100x speedup on substring-heavy workloads (requires building with daachorse-index Cargo feature).
Enforces 10 MB body/payload caps on HTTP, command stdout, and NATS dynamic pipeline sources, a 30-second command execution timeout, and a 1-second refresh interval floor to close known resource exhaustion limitations.
Rejects the unsupported |not modifier in Sigma rules with a dedicated NotIsNotAModifier error guiding users toward condition-level negation.
RSigma v0.10.0 adds dynamic Sigma pipelines with four source types and native EVTXEVTXWindows XML-based binary log format used by the Event Log service to store system, application, and security events; cyber tools parse it to extract forensic artifacts from live systems or offline disk images. input support
└──▷ GET THIS VERSION
$ git clone --branch v0.10.0 https://github.com/timescale/rsigma.git
# already have the repo? check out this version:$ git checkout v0.10.0
└──▷ USE IT
Fetch remote threat intel and cache it with a 300s TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit., using JSONPathJSONPathA query language for extracting values from JSON documents, modeled after XPath for XML. Cyber tools use it to pinpoint specific fields in structured data without parsing the whole document manually. to extract indicators for injection into Sigma rules.
rsigma v0.9.0 adds production NATS JetStream with auth/TLS/dlq/replay, OTLPOTLPOpenTelemetry Protocol, a standard way to send traces, metrics and logs between applications, collectors and monitoring systems. It lets telemetry move across compatible tools. log ingestion, LynxDB backend, rsigma fields, structured exit codes, and per-rule metrics.
└──▷ GET THIS VERSION
$ git clone --branch v0.9.0 https://github.com/timescale/rsigma.git
# already have the repo? check out this version:$ git checkout v0.9.0
└──▷ TRY IT
Ingest logs from an OTLP-compatible agent via the HTTP endpoint on port 9090.
Adds --nats-creds, NATS_CREDS, --nats-token, NATS_TOKEN, --nats-user, --nats-password, NATS_USER, NATS_PASSWORD, --nats-nkey, NATS_NKEY, --nats-tls-cert, --nats-tls-key, and --nats-require-tls flags for NATS authentication/TLS; --dlq <url> for dead-letter queues; --replay-from-sequence, --replay-from-time, and --replay-from-latest for replaying messages; --consumer-group for horizontal scaling; --keep-state and --clear-state for correlation state control; and --timestamp-fallback <wallclock|skip> for timestamp handling.
Adds native OTLP log ingestion on POST /v1/logs (protobuf + JSON) and gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication.LogsService/Export on the daemon's API address, gated by daemon-otlp feature
Adds LynxDB conversion backend via rsigma convert -t lynxdb for translating Sigma rules into SPL2-compatible queries; and rsigma fields subcommand with -p, --no-filters, and --json options to extract field names from Sigma rules.
Adds structured exit codes (0=success, 1=findings, 2=rule error, 3=config error) and eval --fail-on-detection / lint --fail-level <error|warning|info> flags for CI/CD scripting; and per-rule Prometheus metrics rsigma_detection_matches_by_rule_total{rule_title,level} and rsigma_correlation_matches_by_rule_total{rule_title,level,correlation_type}.
Splunk Security Content v5.27.0 adds 67 new detections spanning Linux CVE-2026-31431, Cisco Secure Access firewall telemetry, and broad Windows attack-lifecycle coverage.
└──▷ GET THIS VERSION
$ git clone --branch v5.27.0 https://github.com/splunk/security_content.git
# already have the repo? check out this version:$ git checkout v5.27.0
New detection: Linux Auditd Copy Fail Privilege Escalation (CVE-2026-31431) uses auditd telemetry to catch unprivileged writes to file page cache targeting setuid binaries.
New analytic story: Cisco Secure Access Analytics enables firewall-telemetry-based detection of suspicious access patterns via cloud-delivered security controls.
Extends existing detections (Large ICMP Traffic, Outbound SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. Traffic, Outbound LDAPLDAPA protocol for querying and modifying directory services, standardized under RFC 4511, commonly used to look up users, groups, and attributes in corporate identity stores like Active Directory. Traffic, Windows RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. Network Brute Force Attempts) to operate with Cisco Secure Access Firewall data.
New analytic story: VIPVIPA Virtual IP address — a single IP shared across multiple hosts or services, commonly used for load balancing or failover so traffic can be rerouted without changing the client-facing address. Keylogger targets .NET-based infostealers with behavioral detections for stealthy execution and persistence.
New detection: PowerShell Environment Variable Execution surfaces encoded payload staging used in phishing-delivered stealer campaigns.
+21 moreshow less
New detection: Windows Anomalous Registry Value Length in Environment Key identifies oversized registry values used for payload staging.
New detection: PowerShell PInvoke Process Injection API Chain catches in-memory process injection via P/Invoke API sequences.
New detection: Windows Proxy Execution of .NET Utilities via Scripts detects script-driven LOLBinLOLBinA legitimate, pre-installed system binary that attackers abuse to execute malicious code, blend into normal activity, and evade defenses — tools use detection of these to catch living-off-the-land attacks. abuse of trusted .NET binaries.
New detections for Cobalt Strike: Windows Cobalt Strike PowerShell Loader and Windows Default Cobalt Strike PowerShell Beacon.
New detections for C2 frameworks: Windows NorthStar C2 Agent Execution and Windows Metasploit Confluence Plugin Execution.
New detections for Cloudflared tunnels: Windows Potential Cloudflared Network Connection and Windows Potential Cloudflared Tunnel Execution.
New detections for EDREDREndpoint detection and response, monitoring computers for suspicious behavior and providing investigation and response controls, such as isolating a device. evasion: Windows EDRSilencer Execution, Windows Filtering Platform Policy Added to Block EDR Process, and Windows CrowdStrike Agent Registry Key Removal.
New EFI/bootkit detections: Windows EFI Bootloader File Modification, Windows EFI Volume Mount Attempt Via Mountvol, and Windows Suspicious File in EFI Volume.
New detection: Windows LAPSLAPSA Microsoft feature that automatically generates, rotates, and stores unique local administrator passwords for each Windows machine in Active Directory, eliminating shared static credentials across a fleet. Password Gathering Via PowerShell Script for credential access via LAPS harvesting.
New detections for RMM tool abuse: Windows RMM Tool Execution, Windows Level RMM PowerShell Script Installer, and Windows Level RMM Watchdog Task Created.
New detections for privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources.: Windows Potato Privilege Escalation Tool Execution and Windows Privilege Escalation Attempt Via MSI Rollback.
New detection: Windows Scheduled Task Created in a Group Policy Object for GPO-based persistence.
New detection: Windows Downdate Registry Activity for downgrade attack tradecraft.
New detection: Windows Devtunnels Execution and Windows Devtunnels Image Loaded for Microsoft Dev Tunnels abuse.
New detection: Windows Process Accessing Windows Recall Directory for access to AI-feature sensitive data.
New detection: Windows Computer Account Changed to Domain Controller for DCSyncDCSyncAn attack that abuses Active Directory replication permissions to request password-related data from a domain controller. It imitates the synchronization normally performed between controllers./DCShadow-style attacks.
New detection: Windows SoftEther VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. Masquerading as Legitimate Binary for VPN-based evasion.
New detection: Windows Suspicious QEMUQEMUAn open-source machine emulator and virtualizer that lets software run a guest OS or CPU architecture on a different host, giving cyber tools an isolated, inspectable execution environment without dedicated hardware. Execution for hypervisor-based evasion techniques.
New detection: Windows Mustang Panda USB Tool Execution for APT USB-based lateral movementlateral movementMoving from an initially compromised system or identity to other resources in a network. Attackers often use stolen credentials or trusted connections to expand their access..
New detection: Windows TeamCity Plugin Installed and Windows TeamCity Payload Execution from Temp Directory for supply chain tooling abuse.
All detections updated to align with MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. v19 technique IDs for improved threat coverage mapping.
Tenzir is a data pipeline engine for security teams that collects, transforms, enriches, and routes telemetry.
tenzir-test v1.10.1 introduces PEP 723PEP 723A Python Enhancement Proposal that standardizes embedding dependency metadata directly in single-file scripts, letting tools automatically resolve and install requirements without a separate config file. inline dependency management for project fixtures, allowing fixture modules to self-define Python package requirements installed via uv.
Project fixtures can declare Python package dependencies inline with PEP 723 metadata; tenzir-test installs these with uv before loading fixtures
1 detail in Everything
5 more releases in this issue
· 2026-05-07 → 2026-05-13
Tenzir Platform v1.32.0 adds Stream timeline, Explorer keyboard navigation, and permanent Insights tab
Adds a timeline to the Stream view that visualizes event volume over time, segmented by schema, with automatic timestamp detection (ts, timestamp, or time).
Adds keyboard navigation between entries in the Explorer table using Arrow Up and Arrow Down keys.
Makes the Insights tab permanently available for every pipeline, showing live per-operator CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. usage, events per second, batch ratios, and queue backpressure.
tenzir v5.36.0: ocsf::derive now supports list-valued OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. enum fields
ocsf::derive now derives OCSF enum sibling fields for lists (e.g., mapping flag_ids: [1, 3, 4] to corresponding string names)
int64/uint64 column merging is now lossless during parsing, preventing unnecessary table-slice splits for mixed signed/unsigned values
Flashpoint Ignite adds native Intelligence Requirements (GIRs/PIRs) for linking alerts to investigations and measuring CTICTICyber Threat Intelligence: structured knowledge about adversaries — their tactics, infrastructure, and indicators — that tools consume to prioritize detections or enrich alerts with context. ROI.
└──▷ HOW TO FIND IT
Create a new Priority Intelligence Requirement (PIR) for monitoring ransomware activity in your industry.
📍In the Ignite UI, navigate to Intelligence Requirements › New PIR and select the pre-built Ransomware Targeting template.
Align an existing alert rule to a specific PIR to reduce noise and focus monitoring on strategic priorities.
📍In the Ignite UI, open an existing Alert Rule › Edit › Select Priority Intelligence Requirement and choose the relevant PIR from the dropdown.
Introduces a dedicated Intelligence Requirements experience for creating and managing General Intelligence Requirements (GIRs) and Priority Intelligence Requirements (PIRs) directly in Flashpoint Ignite
Enables pre-built PIR templates and custom requirement creation to accelerate onboarding
2 details in Everything
4 more releases in this issue
· 2026-05-05 → 2026-05-28
Flashpoint Ignite adds Intelligence Requirements (GIRs/PIRs) with alert alignment and investigation linking.
Introduces a dedicated experience for creating and managing General Intelligence Requirements (GIRs) and Priority Intelligence Requirements (PIRs) directly in the platform, supported by pre-built templates or custom definitions
Adds capability to align monitoring alert rules—both existing user-created rules and AI-recommended ones—to specific PIRs within the platform
Enables escalation of intelligence findings into Investigations workflows with optional direct connection to specific PIRs for operational tracing
Provides visibility metrics on monitoring activity, investigative escalations, and operational workflows tied to specific intelligence priorities
Flashpoint launches EASMEASMExternal Attack Surface Management: a discipline and category of tooling that continuously discovers and monitors an organization's internet-facing assets to identify exposures before attackers do. as an Ignite add-on for continuous discovery and mapping of internet-facing assets to proprietary vulnerability intelligence.
└──▷ HOW TO FIND IT
Operationalize EASM by seeding it with your known domains and IPs to begin continuous asset discovery within Ignite.
📍In the Ignite console, navigate to the new EASM module and enter your seed keywords (known domains and IP addresses) to start the inventory triage workflow.
New EASM module available as an add-on in the Flashpoint Ignite service, providing continuous external attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. management.
OpenCTI 7.260529.0 adds XTM Hub newsfeed integration, one-click playbook deployment, and Send to AI playbook component.
└──▷ GET THIS VERSION
$ git clone --branch 7.260529.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260529.0
Adds ability for users to receive newsfeeds from the XTM Hub for new custom dashboards uploads
Integrates XTM Hub Newsfeed into the platform
Adds one-click deployment of playbooks from the XTM Hub
Adds Send to AI as a playbook component to transform STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. bundles with an AI agent
4 details in Everything
7 more releases in this issue
· 2026-05-06 → 2026-05-29
OpenCTI 7.260527.0 adds per-IP/user-agent rate limiting and bulk playbook enrollment
└──▷ GET THIS VERSION
$ git clone --branch 7.260527.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260527.0
Adds rate limit threshold configuration applied per IP and per user-agent for API requests
Enables bulk enrollment of entities into playbooks via the new bulk_enroll mutation
OpenCTI 7.260522.0 adds news-feed toast notifications and saved filters API sharing
└──▷ GET THIS VERSION
$ git clone --branch 7.260522.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260522.0
Adds automatic cleanup of old XTMHub news feed items (older than 6 months)
Adds toast notifications for new unread items in the news feed
OpenCTI 7.260520.0 adds custom views, knowledge manipulation target scope, and sharing filters for cyber tooling workflows
└──▷ GET THIS VERSION
$ git clone --branch 7.260520.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260520.0
Adds targetScope field to Playbook knowledge manipulation components to specify whether changes apply to all elements, main element only, or 'all except main element'
Extends decay rule filtering with new pattern type, author, and marking criteria options
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The CUSTOM_VIEW feature flag has been removed; custom views are now always enabled
$ git clone --branch 7.260513.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260513.0
└──▷ HOW TO FIND IT
Navigate to the new XTMHub news feed tab to view paginated updates.
📍In the OpenCTI UI, go to the XTMHub section and click the new News Feed tab.
Adds a new UI tab displaying paginated news feed items for XTMHub subscribers
Improves performance by running initial validation checks in parallel during startup
OpenCTI 7.260512.0 adds structured agents instructions, interruptible managers, skips ES recovery for filtered live streams, and removes a security coverage feature flag
└──▷ GET THIS VERSION
$ git clone --branch 7.260512.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260512.0
Adds structured_agents_instructions to the AI configuration for customizing LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. system prompts.
Enables manager interruption during shutdown via a new interruptible timer mechanism.
Skips Elasticsearch recovery logic when live streams are configured with origin filters.
Removes the feature flag gating the security coverage result page, making it permanently available.
OpenCTI 7.260507.0 adds origin-based filtering to live streams and UBI 9 container support.
└──▷ GET THIS VERSION
$ git clone --branch 7.260507.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260507.0
origin parameter added to live stream subscriptions for filtering events
Platform and worker Docker images now support UBI 9 as the base OS
OpenCTI 7.260506.0 adds an API endpoint for SCO consistency cleanup, XTM Hub newsfeeds support, and Security Coverage relations for Indicators/Artifacts
└──▷ GET THIS VERSION
$ git clone --branch 7.260506.0 https://github.com/OpenCTI-Platform/opencti.git
# already have the repo? check out this version:$ git checkout 7.260506.0
Adds Add XTM Hub newsfeeds preferences to user profile, enabling users to configure their newsfeed subscriptions via the UI
Adds has-covered relations between Security-Coverage entities and both Indicator and Artifact objects
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The user profile key mapping now uses publicJWK instead of the previous publicKey format.
Feedly Threat Intelligence adds an OpenCTI connector that pushes STIX 2.1STIX 2.1A JSON-based open standard maintained by OASIS for representing threat intelligence objects and relationships, letting cyber tools exchange indicators, actors, and TTPs in a common machine-readable format. bundles directly from AI Feeds
└──▷ HOW TO FIND IT
Deploy the connector and configure it to ingest intelligence for specific threat actors.
📍1. Deploy connector from OpenCTI repository.
2. Set credentials with Feedly API token and OpenCTI URL.
3. Configure AI Feeds and Folders to scope input.
4. Set ingestion interval (e.g., hourly).
Adds a new OpenCTI connector to automatically push STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. 2.1 bundles from Feedly AI Feeds to the OpenCTI knowledge graphknowledge graphA representation of entities and the relationships between them. Software can follow those connections to answer questions or combine information from different sources.
Enables automated extraction of threat actors, TTPsTTPsTactics, techniques and procedures, the goals, methods and specific behaviors used by an attacker. They describe how an attack works, rather than only the files or addresses it leaves behind., malware, CVEs, and IoCs from 5,000 open sources into structured STIX entities with mapped relationships
2 details in Everything
5 more releases in this issue
· 2026-05-06 → 2026-05-28
Feedly introduces Intel Agents, Ask AI, Report Builder, and MISP integration for CTICTICyber Threat Intelligence: structured knowledge about adversaries — their tactics, infrastructure, and indicators — that tools consume to prioritize detections or enrich alerts with context. teams.
Adds Vulnerability Intel Agent for personalized CVE monitoring filtered by vendor, product, and attack vector
Adds Cyberattack Intel Agent to monitor real-time attack activity targeting specific industries
Adds TTP Intel Agent to track trending ATT&CKATT&CKA publicly maintained knowledge base by MITRE cataloguing adversary tactics, techniques, and procedures observed in real attacks, giving cyber tools a common taxonomy for classifying and correlating threat behavior. techniques and launch into MITRE ATT&CKMITRE ATT&CKA publicly maintained knowledge base of adversary tactics and techniques observed in real attacks, maintained by MITRE. Cyber tools use it as a common taxonomy to classify, map, and communicate threat behavior. Navigator
Adds Ask AI capability on top of Intel Agents, Insights Cards, and AI Feeds for synthesis and IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. extraction
Adds Insights Cards providing structured context on CVEs, Cyberattacks, Threat Actors, and IoCs
+2 moreshow less
Adds Report Builder that extracts sections from templates and auto-populates them with sourced claims
Adds support for MISP as an integration destination for enriched feed data
Feedly Threat Intelligence adds GreyNoise classification signals directly inside IoCIoCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. Insight Cards for in-platform enrichment.
Surfaces GreyNoise behavioral and classification signals alongside OSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. in IoC Insight Cards
New Analyst1 integration pulls Feedly data via STIX 2.1STIX 2.1A JSON-based open standard maintained by OASIS for representing threat intelligence objects and relationships, letting cyber tools exchange indicators, actors, and TTPs in a common machine-readable format.; IoCIoCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. cards get GreyNoise/VirusTotal enrichment; Vulnerability Agent tracks Apple updates.
Pulls threat intelligence from Feedly Folders, AI Feeds, or Team Boards into Analyst1 as structured evidence via STIXSTIXStructured Threat Information Expression, a standard format for describing threats, indicators and their relationships. It helps organizations exchange threat intelligence in a usable form. 2.1 output.
Surfaces contextual threat intelligence from GreyNoise and VirusTotal in IoC Insights Cards via the Integrations page.
Includes Apple security updates under the Security Update Releases filter in the Vulnerability Agent.
Ask AI added to Cyberattack Intel Agent allows custom prompts across up to 100 attacks.
└──▷ HOW TO FIND IT
Generate a threat landscape overview for a specific region and industry using custom filters.
📍In the Cyberattack Intel Agent, filter by time period, industry, and region. Use Ask AI prompt: 'Based on the selected attacks, generate a threat landscape overview for [region] and [industry].'
Identify novel TTPsTTPsTactics, techniques and procedures, the goals, methods and specific behaviors used by an attacker. They describe how an attack works, rather than only the files or addresses it leaves behind. and IoCs across recent activity using saved Intel Profiles.
📍In the Cyberattack Intel Agent, select time period and an Intel Profile. Use Ask AI prompt: 'What novel TTPs and IoCs are being leveraged in these attacks?'
Visualize the attack chain from initial access to impact for selected incidents.
📍In the Cyberattack Intel Agent, filter by time period, threat actor, and MITRE ATT&CK Tactic. Use Ask AI prompt: 'Visualize the attack chain for these incidents with a diagram mapping each phase from initial access to impact.'
Adds Ask AI capability within the Cyberattack Intel Agent allowing analysts to run custom AI prompts against threat data.
Enables running custom queries across up to 100 cyberattacks at once in the Cyberattack Intel Agent.
Adds OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. spec generation to CI and large object read routing for ThreatExchange
└──▷ GET THIS VERSION
$ git clone --branch hma-v1.1.6 https://github.com/facebook/ThreatExchange.git
# already have the repo? check out this version:$ git checkout hma-v1.1.6
Generates an OpenAPI specification during the website CI pipeline, providing a machine-readable API contract for ThreatExchange endpoints.
Routes large object reads through a database read replica in High Memory Availability (HMA) deployments to reduce load on the primary writer node.
2 details in Everything
1 more release in this issue
· 2026-05-08 → 2026-05-22
ThreatExchange hma-v1.1.5 adds /status/live endpoint and switches to jemalloc
└──▷ GET THIS VERSION
$ git clone --branch hma-v1.1.5 https://github.com/facebook/ThreatExchange.git
# already have the repo? check out this version:$ git checkout hma-v1.1.5
Adds the /status/live API endpoint for live health checking of the ThreatExchange instance.
Swaps the allocator to jemalloc to reduce memory fragmentation, improving stability under load.
Lookyloo v1.39.0 adds remote headful captures and a new API to expose Lacus instance configuration.
└──▷ GET THIS VERSION
$ git clone --branch v1.39.0 https://github.com/Lookyloo/lookyloo.git
# already have the repo? check out this version:$ git checkout v1.39.0
Adds support for remote mode in headless browsers by enabling Remote headfull captures when the underlying Lacus instance supports it, allowing complex JavaScript-heavy sites to be rendered and captured correctly.
MSTICPy v3.0.1 adds path traversal protection for archive extraction across GeoIPGeoIPA database that maps IP addresses to geographic locations; tools use it to attribute traffic or alerts to countries, cities, or ASNs without querying external services., Mordor, and Sentinel query pack downloads.
└──▷ GET THIS VERSION
$ git clone --branch v3.0.1 https://github.com/microsoft/msticpy.git
# already have the repo? check out this version:$ git checkout v3.0.1
Adds centralized msticpy.common.archive_utils module that validates archive member paths before extraction, preventing tar-slip/zip-slip attacks when extracting GeoIP databases, Mordor datasets, and Sentinel query packs.
New CyberWatch threat intel module, OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. auth, interactive map, KPI panels, and new API docs in Watcher v3.4.0
└──▷ GET THIS VERSION
$ git clone --branch v3.4.0 https://github.com/thalesgroup-cert/Watcher.git
# already have the repo? check out this version:$ git checkout v3.4.0
└──▷ USE IT
Enable SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. login while keeping local form auth as fallback.
View the OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth. 3 schema for programmatic client generation.
Trigger the OIDC callback flow after configuring your IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems..
📍# Register this URL in your OIDC provider
https://<your-domain>/api/auth/oidc/callback/
Adds the CYBER_WATCH_CVE_API_URL environment variable to configure the CVE source endpoint.
Adds CYBER_WATCH_RANSOMWARE_GROUPS_URL, CYBER_WATCH_RANSOMWARE_VICTIMS_URL, and CYBER_WATCH_RANSOMLOOK_* environment variables for ransomware data sources.
Adds LOGIN_MODE, OIDC_COMPANY_NAME, OIDC_RP_CLIENT_ID, and OIDC_RP_CLIENT_SECRET configuration keys to control federated login behavior.
Adds the /api/auth/oidc/callback/ endpoint for handling OIDC authentication responses.
Adds /api/docs/ (Swagger UI) and /api/schema/ (OpenAPI 3 JSON) endpoints for API documentation.
+6 moreshow less
Adds udrp_status and udrp_last_checked fields to the Site model for UDRP case tracking.
Adds a new CyberWatch module with a standalone dashboard accessible from main navigation.
Adds KPI panels to all six modules via dedicated /statistics/ API endpoints.
Adds an interactive world map in Threats Watcher powered by MapLibre GL for visualizing RSS sources and ransomware victims.
Enables drag-and-drop resizing of dashboard panels with layout persistence in localStorage.
Adds /profile route with theme picker and layout manager for user preferences.
11 details in Everything
└──▷ BREAKING ON UPGRADE
!The OIDC_ENABLED environment variable has been removed; use LOGIN_MODE instead.
Security Analytics adds resource tagging for alerts with filtering, bulk editing, and permission controls.
Expanded Resource Tagging (Limited Availability): Apply tags to Alerts and filter them by tags, as well as bulk edit tags and permissions across alerts.
1 detail in Everything
4 more releases in this issue
· 2026-05-13 → 2026-05-28
ThreatStream adds Zscaler OneAPI support, open-source feeds to APP Store, and OCSB schema RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists.
Adds Zscaler OneAPI integration alongside the legacy Zscaler API for collecting threat data.
Makes Anomali Dark Web Intelligence and Anomali Threat Briefing open-source feeds available for activation in the APP Store.
Enables Organization administrators to configure Role-Based Access ControlRole-Based Access ControlRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. using OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. schema fields in addition to the standard eventlog schema.
Anomali introduces resource tagging, OCSA schema RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists., and customizable export timestamps.
Adds the ability to apply tags to Saved Searches, Alerts, Views, Macros, and Lookup Tables, including filtering by tag and bulk editing permissions.
Adds Role-Based Access ControlRole-Based Access ControlRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. for Schemas using OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work. schema fields alongside standard eventlog schema.
Enables full-text indexing, correlations, and turbosearch-based AQL querying on the OCSF schema.
Adds a selectable timestamp format (human-readable or UNIX) when exporting search results.
ThreatStream Next Gen adds PIR expiry dates and industry-specific threat landscape views.
Adds expiry date configuration to PIRs at creation or edit time
Expands Global Threat Landscape in Command Center to 26 industry verticals using STIX 2.1STIX 2.1A JSON-based open standard maintained by OASIS for representing threat intelligence objects and relationships, letting cyber tools exchange indicators, actors, and TTPs in a common machine-readable format. and CISA critical infrastructure sectors
ThreatStream adds Premium Digital Risk Protection service, RansomLook.ioOSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. feed, and entity export to existing threat models.
Adds Premium Digital Risk Protection (PDRP) service via the App Store for external attack surfaceattack surfaceThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources. monitoring
Adds RansomLook.io open source ransomware OSINT feed availability in the App Store
Adds ability to add investigation entities to an existing threat model
Cloudmersive Reverse Proxy v4-11-13 adds HSTSHSTSAn HTTP response header, standardized in RFC 6797, that instructs browsers to contact a site over HTTPS only for a declared period, preventing protocol-downgrade and cookie-hijacking attacks. transform policy
Adds HSTS transform policy to enable HTTP Strict Transport Security enforcement.
Cloudmersive Private Cloud DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. AI API v2-7-4 adds batch job functionality.
Adds batch job functionality for offline data scanning workflows.
Cloudmersive Cloud DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. AI API v2-7-4 adds batch job functionality.
MISP 2.5.38 adds a workflow blocklist action module, TAXIITAXIIA protocol for sharing threat intelligence over HTTPS, commonly carrying STIX data. It lets tools retrieve and exchange intelligence from compatible services. 2 spec conformance, and Overmind UI Sync tab migration.
└──▷ GET THIS VERSION
$ git clone --branch v2.5.38 https://github.com/MISP/MISP.git
# already have the repo? check out this version:$ git checkout v2.5.38
└──▷ HOW TO FIND IT
Enable the new Blocklist action module in a workflow to automatically write matched event attributes to a blocklist file, grouped by tag.
📍In the MISP UI, go to Event Actions › Workflows, open or create a workflow, and add the Blocklist action module from the module palette. Configure the output file path, enable removal-by-tag, and optionally enable rolling filesystem snapshots in the module settings.
New Workflows Blocklist action module writes event attributes to a blocklist file, with removal-by-tag, atomic writes with one-generation backup, and optional rolling filesystem snapshots.
TAXII 2 updated to spec and schema v148 conformance.
Overmind UI Sync tab migration: Servers, SharingGroup, SharingGroupBlueprints, Sightingdb, TaxiiServers, Communities, and Cerebrate views ported to the Overmind theme.
Cribl Stream 4.18.0 adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. integrations, new sources/destinations, S3-backed persistent queues, and Guard AI models
MCP Integrations for Cribl AI enables external Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. servers via endpoint URLs with auth headers and API keys
Cribl Copilot Chatbot Toggle in AI Settings dashboard allows admins to enable or disable the chatbot widget independently of other AI features
New Azure Event Hubs AMQP Source ingests events via Event Hubs’ native AMQP protocol
New Okta Source enables collection of Okta system logs using the Okta Management API
New OpenAI Compliance Logs Source (Platform Source) collects compliance and observability logs for ChatGPT Enterprise deployments
+24 moreshow less
New Anthropic Compliance API (Claude Compliance API) Source collects compliance data from Anthropic’s Enterprise Compliance API
New ServiceNow Table API Source ingests records from ServiceNow’s Table API
S3-Backed Shared Persistent Queue Storage allows Worker Groups to use AWS S3 or S3-compatibleS3-compatibleAn object-storage API that mirrors Amazon S3's HTTP interface, so any client or cyber tool written for AWS S3 works unchanged against any compliant storage backend. storage as a centralized backing store for PQs (on-prem/hybrid only)
Cribl Guard Detection Analysis and Model Selection introduces agentic Guard analysis with new privacy models selectable in the Detection model drop-down on the Guard page
New Apps (Preview) feature allows building and running custom packaged UI experiences that call Cribl and third-party APIs
REST Collector Interactive Debug Mode captures full HTTP request/response details for authentication, discovery, and collection phases
New Buffer size limit (bytes) setting for Source and Destination persistent queues replaces the deprecated event-based limit
New orphanedJobTTL parameter in UI or job-limits.yml configures Job Reaper removal time for orphaned Collection jobs (default: 7d)
Number of connection listener processes setting in Outpost Group configuration defines connection processes for Outpost Nodes
Max log files per type in UI or -l argument for ./cribl diag create CLI specifies max rotated log files in diagnostic bundles
OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. Destination now supports dynamic metadata for gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. protocol and OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. Client Credentials for HTTP protocol
Wiz Defend Destination adds new Wiz Source Type options: AWS VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. Flow Logs, AWS Resolver Query Logs, OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. Audit Logs
ClickHouse Destination now supports up to 25 MB Body Size Limit for write batches (increased from 10 MB)
Google Cloud Pub/Sub Destination maps event’s attributes field to native Pub/Sub message attributes on publish
Prometheus Remote WritePrometheus Remote WriteA protocol for streaming time-series metrics from a Prometheus instance to a remote storage backend, letting cyber tools offload long-term metric retention and query load to a dedicated system. integrations use the v2 parser by default for on-prem deployments
File Monitor Event breakers now persist state across restarts for custom header-based and stateful breakers
Journal Files Sources have new Suppress errors when search path does not exist option
Prometheus Scraper Source supports HTTP-based service discovery and new Use field per metric setting
Datadog Agent Source now supports ZSTD-compressed logs (aligns with Datadog Agent 7.67.0+)
OpenTelemetry Source (HTTP) supports configuration of multiple authentication tokens
Wiz API Source adds content types for Detections, Application Endpoints, Cloud Resources V2, and configurable event breakers
Microsoft GraphMicrosoft GraphMicrosoft's unified REST API for accessing data and services across Microsoft 365, Azure AD, and related cloud products, giving cyber tools a single authenticated endpoint to query users, emails, files, and sign-in logs. Source supports state tracking using Graph delta queries
Expanded Pack Variables allow use within simple arrays and across Collectors, Sources, and Destinations
Pack Notifications feature allows configuring and managing Notifications for Sources and Destinations directly within the Pack context
29 details in Everything
└──▷ BREAKING ON UPGRADE
!API responses for /system/settings, /system/settings/auth, and /lib/database-connections no longer include plaintext bindCredentials or client_secret; values are omitted or masked.
!The Disable Node persistence setting is deprecated and will be removed in 4.19.0.
!The Buffer size limit (events) setting for persistent queues is deprecated in favor of the byte-based limit; fully removed in an upcoming release.
!The Tee Function is deprecated in Cribl Stream and Cribl Edge; disabled by default for new installations and will require Support enablement in a future release.
NodeZero May 2026 adds NetBIOS domain support for AD audits, Linux PE implants, and asset management enhancements.
Adds NetBIOS domain name support for Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. auditing workflows and secretsdump operations
Adds new Linux privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. implant support for copy/fail techniques associated with CISA KEVs
Adds weakness alias badges within the Vulnerability Management Hub to improve identification and filtering of related weaknesses
Enables direct search within the Runner selection drop-down when launching operations
Allows MSPMSPA managed service provider, a company that operates IT services for customers. It may manage systems, networks, backups or other ongoing technology needs. parent accounts to view and set contracted asset counts directly via the Asset Allocation modal
+1 moreshow less
Adds an asset lock status badge to show temporary asset allocation restrictions in MSP interfaces
New Terraform detection management in SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents., native IOCIOCAn indicator of compromise, an observable clue that may point to malicious activity, such as a suspicious file hash or domain. It is evidence to investigate, rather than proof by itself. sources, and unified user settings across Rapid7 Command Platform
Adds the ability to create, validate, and deploy detections as code in SIEM (InsightIDR) using Terraform.
Adds Native IOC Management for Threat Intelligence feeds within Command Platform > Data Connectors > Sources.
Adds a Resource Type filter to the Remediation Hub main table to filter by Instance, Container, or Host.
Adds AI-Enhanced Attack Modules with LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code.-based vulnerability pre-triage in Application Security > Settings > Scan Options.
Adds Unified User Resources and Settings via Command Platform > Profile > User Settings for centralized profile management.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Oracle Cloud Vault and Secret resource identification changes format to {vault_display_name}.{vault_id} and {secret_name}{vault_id}, causing existing resources to be re-identified as new.
DefectDojo 2.58.2 adds KSA Security Advisory support and tightens Burp permissions.
└──▷ GET THIS VERSION
$ git clone --branch 2.58.2 https://github.com/DefectDojo/django-DefectDojo.git
# already have the repo? check out this version:$ git checkout 2.58.2
Adds KSA Security Advisory integration via new settings in settings.dist.py / local_settings.py.
Introduces a dedicated permission class for BurpRawRequestResponseViewSet, enabling finer-grained API access control over Burp raw request/response data.
DefectDojo 2.58.0 adds Qualys VMDR CSV parser, WatchGuard and CNNVD vuln ID support, RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. on risk acceptance, and a centralized banner system.
└──▷ GET THIS VERSION
$ git clone --branch 2.58.0 https://github.com/DefectDojo/django-DefectDojo.git
# already have the repo? check out this version:$ git checkout 2.58.0
New Qualys VMDR CSV parser for importing vulnerability scan results.
New WatchGuard Security Advisory parser for vulnerability ID enrichment.
Adds Mozilla Foundation Security Advisory as a supported vulnerability ID source.
Adds CNNVD (China National Vulnerability Database) as a supported vulnerability ID source.
Govulncheck parser now surfaces fix_available and fix_version fields in findings.
+13 moreshow less
RBAC enforcement added to accept_risks API endpoints, restricting risk acceptance by user role.
New centralized banner system with open-source messaging support in the UI.
Import/reimport API now validates consistency between ID-based and name-based identifiers.
API now enforces permission checks when moving engagements between products.
Create-path notifications dispatched asynchronously, reducing slow POST latency.
SLASLAA formal agreement between a service provider and customer that defines expected uptime, response times, and remedies for failures, giving cyber tools a contractual baseline for availability and support commitments. breach notification format and display improved in the UI.
Bulk delete findings now supports an extension hook for customization.
More parameters stored in import settings for persistent configuration.
Invicti parser updated to use FirstSeenDate for more accurate first-seen tracking.
Risk acceptance reactivation behavior changed for previously risk-accepted findings.
Pickle removed from forms and Celery serializer (settings change required).
MAX_ZIP_* limits moved to settings.dist.py / local_settings.py for operator control.
Database: locations performance improvements via migration.
18 details in Everything
└──▷ BREAKING ON UPGRADE
!Pickle is removed from forms and the Celery serializer; existing setups relying on pickle-based serialization in Celery will break and require reconfiguration.
!MAX_ZIP_* settings are moved to settings.dist.py / local_settings.py; any hardcoded or previously defaulted values must now be explicitly set there.
New Mixed severity display and tooltip in Group By Plugin view for partial rule applications.
The Severity column in the Group By Plugin view now displays Mixed for rows with findings at multiple severity levels due to partial recast or accept rule application.
Hovering over the Mixed badge in the Group By Plugin view shows a tooltip listing each severity level and the count of findings at that level.
2 details in Everything
6 more releases in this issue
· 2026-05-12 → 2026-05-27
Tenable Exposure Management GA release adds Tenable Hexa AI agentic engine with UI agents and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server.
Tenable Hexa AI agentic engine is generally available, enabling multi-step actions beyond chat-based Q&A.
New Hexa UI surface embedded in Tenable One platform provides out-of-the-box pre-built agents for asset management, visualization, configuration, risk adjustment, remediation, and attack pathattack pathA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. analysis.
New Hexa MCP server at cloud.tenable.com/mcp/ exposes Tenable's Exposure Data Fabric via Model Context ProtocolModel Context ProtocolModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. for custom agent orchestration.
Tenable Hexa AI GA introduces pre-built agents and a hosted MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server for agentic vulnerability management.
Adds Hexa UI pre-built agents for Contextual Asset Management, Dynamic Visualization, Assessment Configuration, Risk Adjustment, and Remediation Workflows embedded in Tenable One
Tenable Exposure Management adds Attack Path statuses, risk acceptance with audit log, and Inbox Zero workflow for APA lifecycle management.
Attack Path Lifecycle Management introduces Technique Statuses (To Do, In Progress, In Review, Done, Accepted) to track real progress on attack pathattack pathA possible sequence of steps an attacker could take to reach a valuable target. It connects weaknesses, permissions and reachable systems rather than treating each finding separately. techniques.
New Intelligent Path Logic automatically calculates Attack Path statuses, marking the entire path as Chain Prevented when a technique is marked Done.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Existing User Archived items are moved to the Open state with a status of Accepted.
Vuls v0.39.0 adds pylock.toml (PEP 751PEP 751A draft Python packaging standard that defines a lock file format for recording exact dependency versions, giving cyber tools a reproducible, machine-readable way to pin their dependency trees.) detection, Ubuntu 26.04 support, RedHat CVE mitigations, and consolidates exploit/KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use./MSF data under vuls2.
└──▷ GET THIS VERSION
$ git clone --branch v0.39.0 https://github.com/future-architect/vuls.git
# already have the repo? check out this version:$ git checkout v0.39.0
Adds pylock.toml (PEP 751) lockfile detection for Python dependency scanning.
Adds Ubuntu 26.04 as a supported OS target.
Surfaces RedHat CVE Mitigation data into VulnInfo via the vuls2 detector.
Adds a DataSources filter to the enrich function, letting users control which data sources are applied during enrichment.
Replaces go-exploitdb, go-msfdb, and go-kev backends with the vuls2 detector for exploit, Metasploit, and CISA KEVCISA KEVA catalog maintained by the US Cybersecurity and Infrastructure Security Agency listing vulnerabilities confirmed to be actively exploited in the wild, giving cyber tools a vetted, authoritative prioritization signal. data.
+3 moreshow less
Replaces gost RedHat CVE filling with the vuls2 detector.
Detects Debian vulnerabilities via the vuls2 detector.
Adds Dependency.PURLPURLA Package URL — a community-maintained spec for identifying software packages across ecosystems (npm, PyPI, Maven, etc.) with a single, consistent string, letting cyber tools pinpoint exact dependencies unambiguously. field (replacing GraphQL-based GitHub detection).
8 details in Everything
└──▷ BREAKING ON UPGRADE
!The go-exploitdb backend is replaced by vuls2; configurations relying on go-exploitdb will no longer function.
!The go-msfdb backend is replaced by vuls2; configurations relying on go-msfdb will no longer function.
!The go-kev backend is replaced by vuls2; configurations relying on go-kev will no longer function.
!The gost RedHat CVE filling path is replaced by vuls2; configurations relying on gost for RedHat will no longer function.
!Debian detection now uses vuls2; existing setups using the previous Debian detector will need to migrate to vuls2.
!The fvuls Docker image is temporarily removed from Docker Hub publish; pipelines pulling that image will fail.
!GraphQL-based GitHub detection is removed; integrations depending on it must migrate to the new Dependency.PURL approach.
Edgescan adds asset creation notifications, role filtering, and enhanced AI Insight controls
└──▷ HOW TO FIND IT
Filter vulnerabilities quickly using standard CWECWECommon Weakness Enumeration, a catalog of recurring software and hardware weakness types. It describes classes of mistakes, such as injection, rather than individual vulnerability instances. identifiers without needing the full name.
📍Use the vulnerability filter and enter CWE-79 or 79 to narrow results.
Adds a new event notification trigger for when assets are created.
Improves role filtering to hide inactive roles by default in assignment flows.
Enhances vulnerability filtering to accept either CWE numbers or the full CWE-## string format.
3 details in Everything
1 more release in this issue
· 2026-05-14 → 2026-05-28
Furl adds desktop tray notifications and multi-select column filters for Targets, Findings, and Endpoints.
Adds desktop tray notifications for informational events, approval requests, and snoozed deferrals
Adds multi-select column filters across Targets, Findings, and Endpoints tables to filter by multiple values simultaneously
Moves column-bound filters (CVE, VSI, CVSSCVSSCommon Vulnerability Scoring System, a method for describing a vulnerability's characteristics and severity. Its score is not the probability that attackers will exploit it. Score) into table column headers and enables per-table persistence of column visibility, page size, and active filters
Intune RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. roles now automatically inherit corresponding Security Copilot access
Microsoft Entra ID Intune Administrator role now inherits Security Copilot owner access by default when Intune is enabled as a data source.
1 detail in Everything
2 more releases in this issue
· 2026-05-04 → 2026-05-26
Intune enables Platform SSOPlatform SSOA macOS framework from Apple that lets identity providers hook into the operating system login flow, enabling enterprise single sign-on at the platform level rather than per-app. during macOS ADE via settings catalog policy for Company Portal 5.2604+
Adds Enable Registration During Setup to the Intune settings catalog to allow Platform SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. during macOS Automated Device Enrollment
Requires Company Portal version 5.2604.0 or newer for Platform SSO during macOS ADE
Munki 7.1.2 adds download retries for manifests and items, assisted quit for blocking apps, and LocalOnlyManifest support for default/featured installs
└──▷ GET THIS VERSION
$ git clone --branch v7.1.2 https://github.com/munki/munki.git
# already have the repo? check out this version:$ git checkout v7.1.2
managedsoftwareupdate now retries downloads of manifests, catalogs, installer items, etc., to improve resilience during transient network failures.
Managed Software Center can assist users with quitting (and relaunching) running applications that block pending updates, and offer to skip blocked updates to install remaining ones.
The LocalOnlyManifest manifest type now supports default_installs and featured_installs keys.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The behavior of managedsoftwareupdate --installwithnologout has changed to support assisting with non-blocked items.
Fleet 4.86.0 adds iOS/iPadOS VPP installs, managed app config, CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmark updates, and major dashboard and GitOpsGitOpsA practice where Git repositories serve as the single source of truth for infrastructure and application state, with automated systems continuously reconciling live environments to match what is declared in version control. expansions.
└──▷ GET THIS VERSION
$ git clone --branch fleet-v4.86.0 https://github.com/fleetdm/fleet.git
# already have the repo? check out this version:$ git checkout fleet-v4.86.0
└──▷ USE IT
Upload custom org logos for light and dark modes via GitOps so brand assets are version-controlled alongside your Fleet config.
yaml
# In your GitOps YAML
org_settings:
org_logo_path_light_mode: ./assets/logo-light.svg
org_logo_path_dark_mode: ./assets/logo-dark.svg
Scope a policy to all hosts across all label groups using the new include_all label scope in GitOps.
yaml
# In your policy GitOps YAML
policies:
- name: Ensure FileVault is enabled
label_scope: include_all
query: SELECT 1 FROM filevault_status WHERE status = 'on';
Retrieve MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. commands scoped to a specific host, now that --host is required.
$ fleetctl get mdm-commands --host 6A4C3B2E-1234-5678-ABCD-9F0E1D2C3B4A
Adds automatic rotation of managed local admin account passwords after they have been viewed.
Adds require_all_software_windows setting to cancel the Windows setup experience if any software install fails during Autopilot enrollment, matching existing macOS behavior.
Adds GitOps support for uploading custom org logos via org_logo_path_dark_mode and org_logo_path_light_mode keys in fleetctl gitops; fleetctl generate-gitops exports Fleet-hosted logos as local files.
Supports installing VPP and in-house (.ipa) apps on iOS and iPadOS hosts enrolled via Account-Driven User Enrollment with a Managed Apple Account.
Enables self-service software installs from the My Device page for user-enrolled iOS and iPadOS hosts.
+26 moreshow less
Enables setup experience software to install automatically on user-enrolled iOS and iPadOS hosts at enrollment.
Provisions a VPP client user per Managed Apple Account on first install, associating VPP licenses to the user rather than the device, supporting Apple's up-to-5-devices-per-user licensing.
Adds managed app configuration for iOS and iPadOS apps (VPP and in-house) with $FLEET_VAR_* substitution, configurable via UI, REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services., and GitOps.
Supports VPP apps purchased from non-US-based Apple Business accounts.
Adds ability to upload a custom organization logo for light and dark modes, hosted by Fleet, with SVG support and server-side sanitization.
Adds include_all label scope to policies, and include_all and include_any label scopes to reports, with GitOps and fleetctl support.
Adds a Custom target dropdown when creating or updating reports under the premium tier, with an Include all option on Policies for premium users.
Adds support for setting gitops_mode_enabled and repository_url via GitOps.
Adds output to GitOps runs for scripts, showing how many scripts would be applied (dry run) or were applied.
Adds activity entries for retried software installs and script runs from policy automations.
Adds activities when hosts fail enrollment profile renewal.
Adds created_label, edited_label, and deleted_label activity entries when users create, edit, or delete labels.
Adds Hosts online, Hosts enrolled, and Vulnerability exposure charts to the dashboard.
Adds an option to convert and return a PEM-encoded X.509X.509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. certificate instead of a PEM-encoded PKCS7 envelope from the Request a Certificate endpoint.
Releases fleetctl as a pkg for macOS and as an msi for Windows.
Enables wiping a host to cancel all of its upcoming activities.
Adds ability to download and view the applied default automatic enrollment profile.
Updates OS version reporting for iOS and iPadOS to include the Rapid Security Response suffix (e.g. (a)).
Requires the --host flag for fleetctl get mdm-commands.
Adds macOS 26 CIS BenchmarkCIS BenchmarkConsensus-based configuration hardening guidelines published by the Center for Internet Security, covering OSes, cloud platforms, and software; cyber tools use them as a ready-made ruleset to audit or enforce secure system baselines. v1.0.0.
Updates CIS Windows 11 Enterprise benchmark policies from v4.0.0 to v5.0.1, adding 17 new L1 policies and updating 42 existing policy titles.
Surfaces hardware-bound ACMEACMEAn IETF-standard protocol (RFC 8555) for automating TLS certificate issuance and renewal, letting cyber tools manage certificates without manual CA interaction. certificates on macOS host vitals by retrieving them via the MDM CertificateList command.
Adds support for the subject_alternative_name field on Android certificate templates.
Optimizes OSVOSVOpen Source Vulnerabilities, a vulnerability database and schema maintained by Google that gives cyber tools a machine-readable, cross-ecosystem format for querying and sharing CVE-style advisories. vulnerability scanning to query distinct software per OS version rather than per host.
Adds a Redis-backed cache for host lookups on osquery and orbit authentication paths, reducing reader-side DB load at scale.
Adds the orbit.debug_logging_on_enroll_duration agent option to enable orbit debug logging for a specified time period after enrollment.
31 details in Everything
└──▷ BREAKING ON UPGRADE
!The --host flag is now required for fleetctl get mdm-commands; invocations without it will fail.
!The Redis-backed host lookup cache requires Redis 6.2 or later; deployments on older Redis versions are not supported.
1 more release in this issue
· 2026-05-14 → 2026-05-29
Fleet 4.85.0 adds dark theme, Clear Passcode for iOS/iPadOS, API-only user management, DDM variable support, and new dashboard charts.
└──▷ GET THIS VERSION
$ git clone --branch fleet-v4.85.0 https://github.com/fleetdm/fleet.git
# already have the repo? check out this version:$ git checkout fleet-v4.85.0
└──▷ USE IT
Force a fresh download of a software package in GitOpsGitOpsA practice where Git repositories serve as the single source of truth for infrastructure and application state, with automated systems continuously reconciling live environments to match what is declared in version control. regardless of whether the remote content has changed — useful when a URL serves a new binary under the same name.
yaml
# In your GitOps software YAML:
software:
- name: MyApp
url: https://example.com/myapp.pkg
always_download: true
Provision an API-only user via the new REST endpoint and immediately inspect their assigned endpoint permissions.
Adds dark theme to the Fleet UI, selectable per-account with light, dark, and system options.
Implements Clear Passcode feature for iOS and iPadOS devices.
Adds support for Fleet variables in Apple DDM (declaration profile) configurations.
Supports passing end-user authentication context to the Fleet MSI installer during Windows MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. enrollment, eliminating double-authentication prompts when EUA is enabled.
Switches to Docker as the default WiX runtime on macOS (including Apple Silicon) for generating .msi packages via fleetctl package, removing the Wine requirement.
+22 moreshow less
Adds new UI pages for creating and editing API-only users with fleet assignment, role selection, and per-user API endpoint access control.
Adds POST /users/api_only endpoint for creating API-only users.
Adds PATCH /users/api_only/{id} endpoint for updating existing API-only users.
Adds new middleware (APIOnlyEndpointCheck) that enforces a 403 response for API-only users accessing endpoints outside their configured restrictions.
Adds premium GET /api/_version_/fleet/rest_api endpoint returning the embedded api_endpoints.yml artifact.
Updates GET /users/{id} response to include the new api_endpoints field for API-only users.
Adds user_api_endpoints table to track per-user API endpoint permissions.
Updates fleetctl user create --api-only to remove email and password field requirements.
Adds conditional HTTP downloads using ETag headers for software in GitOps, skipping re-download when content hasn't changed.
Adds always_download option for software in GitOps to bypass conditional download behavior.
Adds automatic escaping of JSON special characters in GitOps variables used in .json configuration profiles (Apple DDM declarations and Android profiles).
Adds Hosts online, Vulnerability exposure, and Hosts enrolled charts to the Fleet dashboard.
Adds an admin setting to control retention of vulnerability-exposure data used by the dashboard chart.
Adds a new policy details page with a read-only view of policy information.
Adds dedicated /policies/:id/live route for running policies.
Enables renewing and deleting AB tokens in the UI while in GitOps mode.
Adds ability to save policies whose SQL is flagged as a syntax error.
Withholds Android Wi-Fi configuration profiles (openNetworkConfiguration with ClientCertKeyPairAlias) until the referenced certificate is installed or terminally failed on the device.
Updates the host OS settings detail column to show the reason when an Android profile is pending due to a certificate dependency.
Switches Fleet-maintained apps serving location from GitHub to https://maintained-apps.fleetdm.com/manifests, with automatic fallback to GitHub.
Updates macOS 15 CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. benchmark to include v2.0.0 changes and macOS 14 (Sonoma) CIS policy set to benchmark v3.0.0.
Updates fleetctl gitops to process Android certificates before Android profiles.
27 details in Everything
└──▷ BREAKING ON UPGRADE
!Fleet names must now differ by more than letter case across UI, API, and GitOps paths; conflicts that were previously allowed now return a 409 error on all code paths.
!Prometheus serving is no longer enabled by default with a hard-coded username and password when the server is started with --dev.
Sophos Mobile 2026.20 adds PrimeFaces UI components, fixes iOS Web Clip URL handling, and drops Duo SCEPSCEPSimple Certificate Enrollment Protocol, an IETF-standardized protocol for automating X.509 certificate issuance and renewal over HTTP, letting cyber tools request PKI certificates from a CA without manual intervention. support
Replaces all date pickers and calendar widgets with PrimeFaces components for a more consistent user experience in the console.
Improves iOS policy configuration by automatically handling Web Clip URLs that omit an explicit protocol (e.g., https://).
Switches iOS and macOS enrollment profile signing to an Apple MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. Vendor certificate, changing the displayed signer name.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Duo device certificate configuration is no longer supported for iOS device policies; existing imported policies require manual deletion of the Duo config.
Devicie adds Microsoft Edge for Business integration and CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline. 4.0 reporting support
└──▷ HOW TO FIND IT
Monitor browser extension activity and password security across managed devices.
📍In the Devicie portal, navigate to Integrations › Microsoft Edge for Business to enable telemetry ingestion.
Generate compliance reports aligned with CIS 4.0 standards.
📍Use the new CIS 4.0 reporting module to deploy policy templates and track compliance status.
Adds Microsoft Edge for Business integration to pull browser security event data (extension activity, password signals, unsafe browsing, sensitive data transfers, authentication events) into the portal
Adds support for CIS 4.0 reporting using Devicie telemetry and policy templates
runZero 4.9.260521.0 adds VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. endpoint enrichment, TOTPTOTPA one-time password algorithm (RFC 6238) that generates short-lived codes from a shared secret and the current time, giving cyber tools phishing-resistant second-factor authentication without a server round-trip. enrollment, and empty site removal.
Adds VPC endpoints data to AWS integration asset enrichment
Enables enrollment of TOTP tokens for authentication
runZero 4.9.260521.2 adds default protocol-negotiation skip for TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. ports 9042 and 9160
Skips protocol negotiation by default for TCP ports 9042 and 9160
runZero v4.9 adds asset deletion for Users role and VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. asset processing in AWS integration.
Users with the User role can now delete individual assets
The AWS integration now processes VPC assets from connected accounts
runZero 4.9.260514.0 adds DTLSDTLSA variant of TLS adapted for UDP, standardized by the IETF, that adds handshake reliability and replay protection without sacrificing datagram semantics — letting cyber tools encrypt low-latency or connectionless traffic. port scanning and fixes AWS ELB IP handling.
The scanner now scans additional DTLS ports (12346, 12366, 12386, 12406, 12426).
Multi-source AWS ELBs no longer keep old IP addresses.
runZero v4.9.260511.0 adds network disruption detection, NetBoxNetBoxAn open-source network infrastructure management platform maintained by the NetBox Labs community, used to model IP addresses, devices, and topology so cyber tools can query a live source of truth about the environment. server version support, and expanded Query-Assets MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. exports
Adds automatic network disruption detection that lowers the scanner's send rate to prevent further congestion.
Extends the NetBox integration to support server versions 4.0 through 4.5.
Enables the Query-Assets MCP tool to export services, attributes, and foreign attributes.
runZero 4.9 adds AWS FSx support, asset comments for Annotator role, PQCPQCCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. SSH handshakes, and randomized TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. scanning.
AWS integration now reports FSx assets
Annotator role users can add asset comments in addition to tags
Network Maps treat eol:true as the later of OS EOL or EOL Extended dates
Scanner randomizes TCP ports to reduce pressure on transparent proxies
Scanner handshakes PQC hybrid ciphers for SSH services
+2 moreshow less
Scanner reports screenshots for non-NLA RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. (Windows) and no-auth VNC
Scanner reports application-layer data for SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. 2.0 wrapped services
Axonius 9.0 introduces Business Context classification, Security Finding Rules, Asset Criticality, and a new navigation structure.
└──▷ HOW TO FIND IT
Visualize classification coverage and identify gaps in Business Context rules.
📍Enable the New navigation toggle at the top of your screen, then navigate to Inventory › Business Context.
Create independent Security Finding Rules for non-CVE threats and view them in a dedicated tab.
📍In the Exposures module, create new Security Finding Rules using queries, then view assets under the Axonius Security Findings tab on the Security Findings page.
Track unused licenses by comparing seat counts against actual device usage.
📍View the Device Unique Users Count and Inactive License Users Count fields in the Software Management module or on the Devices page.
Adds Business Context feature for centralized asset classification by business unit, lifecycle status, and ownership
Adds three-tab view (All, Axonius Security Findings, External Security Findings) to the Security Findings page
Enriches vulnerability data with Axonius Threat Intelligence including exploit, weaponization, and KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. status
Introduces Axonius Vulnerability Score (AVS) calculated via an AI-powered pipeline for risk prioritization
Adds Asset Criticality mechanism with pre-defined rules and custom query-based categories for assets
+8 moreshow less
Provides out-of-the-box Security Finding Risk Score and Asset Risk Score models for prioritization
Empowers analysts to assign remediation tasks via the new Remediation Ownership feature
Generates prioritized solution lists in Recommended Actions tab within the Action Center
Adds Internal Software Version Rank field to rank installed software versions by recency
Adds Device Unique Users Count and Inactive License Users Count fields for license tracking
Redesigns platform navigation into Home, Dashboard, Inventory, Exposures, Action Center, Adapters, and Analysis sections
Enables adding relationship columns from related asset tables in the Query Wizard
Allows setting maximum timeout (up to 6 hours) for Network Routes enrichment process
Axonius 8.0.25 adds incremental workflow testing, new adapters (A10, Netgate pfSense, etc.), and SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. compliance standards.
└──▷ HOW TO FIND IT
Test workflow logic node-by-node to catch configuration errors early without affecting production assets.
📍Run the Workflow Test Run & Debugging feature in the Axonius platform interface, selecting specific nodes or the entire workflow to validate data flow and execution status.
Enable AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege. authentication for Akeyless Vault adapters to eliminate static credential rotation.
📍Configure the Akeyless Vault adapter in Axonius System Settings, selecting AWS IAM and Universal Identity authentication methods to utilize role-based authentication via EC2 instance profiles.
Fetch firewall threat profiles to enrich network traffic security visibility in Palo Alto Networks Panorama.
text
Enable the 'Fetch Firewall Threat Profiles' advanced setting in the Palo Alto Networks Panorama adapter configuration within Axonius.
Adds node-by-node Workflow Test Run & Debugging to build and test workflows incrementally without production risk
Adds ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability. 27001 standard support in the Compliance field on the SaaS Applications page
Sets Create New Asset fields as default fields on Assets Pages
Adds Akeyless Vault adapter support for AWS IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. and Universal Identity authentication methods
Adds new adapter for A10 Control to fetch Devices
+35 moreshow less
Adds new adapter for Beamy to fetch SaaS Applications
Adds new adapter for Boost Security to fetch Application Resources
Adds new adapter for FortiAuthenticator to fetch Users, Devices, Groups
Adds new adapter for GEM One to fetch Devices
Adds new adapter for Netgate pfSense to fetch Networks and Network/Firewall Rules
Adds new support for fetching allowed devices from AlgoSec Firewall Analyzer with device type filtering
Adds GitHub Advanced Security vulnerability alerts as Security Findings in Azure DevOps adapter
Adds option to fetch devices during active BigFix Inventory import
Enhances BitSight Security Ratings to parse domain and URL findings as separate asset types
Adds benchmark exceptions and rule-level errors per assessment in CISCISA nonprofit that publishes consensus-based configuration benchmarks and controls for hardening operating systems, cloud environments, and software; cyber tools use it as a ready-made compliance baseline.-CAT Pro adapter
Adds hostname exclusion advanced setting in Cisco Meraki adapter
Migrates CloudFlare Zero Trust adapter to API Token-only authentication, removing User Email connection parameter
Adds Network Services fetching for Cloudflare DNS adapter with parsing of MX, TXT, SRVSRVA DNS record type that advertises the hostname and port for a specific service, letting clients discover endpoints without hardcoded addresses., NS, PTR records
Adds option to fetch only online devices in CrowdStrike Falcon adapter
Migrates CyberArk Endpoint Privilege Manager to POST /Sets/{set_id}/Endpoints/search endpoint
Adds Application Settings and SaaS Applications fetching options in Databricks adapter
Adds device log enrichment option in Exabeam Cloud adapter
Adds DNS lookup disabling option for virtual servers in F5 BIG-IP iControl adapter
Adds network assets fetching from global interfaces in FortiManager adapter
Adds Application Settings fetching in Google Workspace adapter
Adds support for API v3 in Greenhouse adapter alongside existing API v1
Adds devices fetching and card reader enrichment in Lenel OnGuard adapter
Fetches Azure AI services as Application Services in Microsoft Azure adapter
Adds vulnerability severity filtering option in Microsoft Defender for Endpoint adapter
Adds Cloud Environment configuration option for Azure US Government Cloud in Microsoft Teams enforcement actions
Adds Application Settings fetching in MicroStrategy adapter
Disables Enrich Users with Messages From endpoint by default in Mimecast V2 adapter
Fetches networks and network site information in NetBrain adapter
Adds Use API v4 advanced setting for Nutanix Prism Central adapter
Updates Okta adapter connection test to support connections without okta.users.read permission
Adds activities fetching via OpenAI Compliance API in OpenAI adapter
Adds mutual TLSmutual TLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. authentication, configurable OAuth scope, and page size configuration in Oracle Fusion HCM Cloud adapter
Automox MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. 1.1.0 adds Splashtop remote control, one-click Claude Desktop install, and bulk policy assignment
Adds automox-mcp package to PyPI and a one-click desktop extension for Claude Desktop
Exposes Automox Remote Control with Splashtop tools to check session status and start remote sessions
Adds Saved-search management and bulk policy assignment capabilities for Device Explorer
3 details in Everything
2 more releases in this issue
· 2026-05-14 → 2026-05-29
New Automox for Zendesk sidebar app enables real-time device visibility and in-ticket endpoint remediation.
Adds a sidebar app to Zendesk that automatically displays requester device details including patch status, missing updates, last reboot time, and hardware information.
Spot the highest-risk third-party titles with KEVKEVCISA's Known Exploited Vulnerabilities catalog, a list of vulnerabilities with evidence of exploitation in real attacks. It helps teams prioritize fixes for problems attackers already use. and EPSSEPSSExploit Prediction Scoring System, an estimate of the probability that a published vulnerability will be exploited in the next 30 days. It helps prioritize investigation and patching.
Adds KEV List column on the Software page to flag third-party titles with actively exploited CVEs.
Adds EPSS column showing the highest exploit-probability score for third-party titles as a percentage.
Adds KEV filter to narrow software views to titles with at least one KEV-listed CVE.
Commvault Cloud is a backup, recovery, and cyber-resilience platform for hybrid, multi-cloud, and SaaS workloads.
Commvault Cloud May 2026 adds Pinecone backup, OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. Instance Principal, Air Gap tiers, S3NS support, and Power BI archiving.
Adds backup and recovery for Pinecone indexes
Introduces Amazon EFS integration for RDS Oracle export-based backups
Enables OCI Instance Principal for secure access to Oracle Cloud resources
Supports VM instances in S3NS cloud environments via Command Center and REST APIsREST APIsA convention for building HTTP-based interfaces where resources are addressed by URL and manipulated with standard verbs like GET, POST, and DELETE, giving cyber tools a predictable way to integrate with external services.
Adds Frequent Access and Infrequent Access storage tiers for Air Gap Protect
+2 moreshow less
Makes Microsoft Power BI data protection generally available
Adds Salesforce Archiving with unlimited retention
Druva Enterprise Workloads May 18, 2026: VCFVCFVMware Cloud Foundation, a VMware (now Broadcom) platform that bundles compute, storage, and networking virtualisation into one stack, giving cyber tools a unified API surface across private-cloud infrastructure. 9.0 backup, Azure LTR, Cape Town region, GovCloud for Azure SQL
Adds VMware Cloud Foundation (VCF) 9.0 support for backing up and restoring vCenter instances in single VCF environments.
Enables Cape Town (af-south-1) storage region for AWS cloud storage to address local data residency requirements.
Introduces Long-term retention (LTR) for Azure Blob Storage accounts, automatically tiering aging recovery points to cold storage.
Adds Long-term retention (LTR) support for Azure Files, allowing data preservation for one year or longer with automatic cold storage tiering.
Druva for Google Workspace adds granular RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. for API credentials with individual permission selection
Supports mapping API credentials to any predefined or custom role instead of only Cloud Admin roles.
Enables selection of individual standalone permissions (e.g., view users, view storages) when configuring roles.
Updates to role-assigned permissions take effect immediately upon application refreshing its access tokenaccess tokenA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions..
Druva adds granular RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. for API credentials with individual permission selection
Expands API credential authorization to support all predefined and custom roles instead of being restricted to Cloud Admin or Cloud Admin (Read Only) roles.
Enables selection of individual, standalone permissions (e.g., view users, view storages, view profiles, view restores) when configuring roles for API credentials.
Druva adds FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one.-authorized ransomware recovery, threat hunting, and anomaly detection to VMware and NAS
Enables Access Events monitoring for admins and API data access
Adds Rollback Actions to restore deleted backups from secure cache for up to 7 days
Introduces Security Center for real-time security posture risk assessment
Adds Data Anomalies detection for unusual file creation, modification, encryption, and deletion actions
Enables Quarantine Bay to isolate infected snapshots
+5 moreshow less
Adds Curated Snapshots for File Server and NAS to create clean recovery points
Introduces Restore Scan for File Server and NAS to check data for viruses during restore
Adds Sandbox Recovery for VMware to scan recovery points in a sandbox environment before restoring
Enables Threat Hunting for VMware to proactively hunt hidden threats
Adds Cyber Recovery and Trends tabs to the VMware restore workflow via Recovery Intelligence
Druva brings centralized reporting for Enterprise Workloads on FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments.-Compliant AWS GovCloud (US) into the unified Cloud Platform Console.
Provides an updated reporting engine in the Druva Cloud Platform Console for accessing audit-ready data to support internal compliance.
Adds a global navigation menu in the Druva Cloud Platform Console for faster discovery of critical GovCloud workload information.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!All subscriptions configured for Legacy reports within the Enterprise Workloads Management Console are incompatible with the centralized reports on the Druva Cloud Platform Console and will not migrate automatically — users must manually re-subscribe to centralized reporting on the Druva Cloud Platform Console.
Adds a Projected Credit Balance line to the Credit and Storage consumption graph to visualize future balance and estimated credit expiry dates
Launches centralized reporting for AWS GovCloud (US) on the Druva Cloud Platform Console as the primary offering for admin workload visibility
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Subscriptions configured for Legacy reports within the Enterprise Workloads Management Console are incompatible with centralized reports and will not migrate automatically; administrators must subscribe to centralized reporting on the Druva Cloud Platform Console.
Centralized reporting now available as the primary offering for AWS GovCloud (US) subscriptions in the Druva Cloud Platform Console.
Adds centralized reporting as the primary offering for administrators in the AWS GovCloud (US) region, replacing Legacy reports.
Moves workload visibility to the unified Druva Cloud Platform Console for GovCloud workloads.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!Subscriptions currently configured for Legacy reports within the Enterprise Workloads Management Console are incompatible with centralized reports and will not migrate automatically.
Kopia is an open-source backup tool for Windows, macOS, and Linux with incremental snapshots, client-side end-to-end encryption, compression, and deduplication, with both a CLI and a GUI.
Kopia v0.23.0 restricts unauthenticated servers to loopback and adds a storage-provider registration mechanism
└──▷ GET THIS VERSION
$ git clone --branch v0.23.0 https://github.com/kopia/kopia.git
# already have the repo? check out this version:$ git checkout v0.23.0
Adds a registration mechanism for storage providers, enabling pluggable back-end storage support.
Adds byte units to maintenance stat summaries for more readable output.
Restricts insecure unauthenticated server to loopback-only binds (previously could bind on any interface).
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Insecure unauthenticated Kopia servers are now restricted to loopback binds only; any server previously bound to a non-loopback interface without authentication will stop working on upgrade.
Adds executor.phaseProgressUpdateInterval Helm value to configure how often the completion percentage of Kasten actions is updated (default raised from 5 s to 10 s).
Adds End-of-Life (EOL) monitoring for repositories with a countdown notification before the protection window expires; reusing an expired repository surfaces an error alert that backups created during the unmonitored period are unverified.
FileRecoverySession now supports restore points exported to Veeam Backup & Replication (VBR) repositories, enabling individual file recovery from VBR-backed workloads.
Improves k10tools repository inventory and k10tools repository cleanup to paginate catalog access during scans, allowing them to complete on installations with large catalogs that previously could exhaust memory.
Shortens VM freeze windows during VM backup, reducing disruption to running workloads and avoiding Windows VSS timeouts.
5 details in Everything
1 more release in this issue
· 2026-05-19 → 2026-05-29
Kasten K10 8.5.9 adds Kubernetes 1.34 support and a direct per-VM restore action from the Virtual Machines page.
Adds ability to initiate a restore operation for an individual VM directly from the Virtual Machines page.
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!Policy, Profile, RunAction, and BatchRestoreAction names are now limited to 63 characters; names exceeding this limit will be rejected at creation time.
Acronis Cyber Infrastructure is hyperconverged software that pools storage, compute, and networking on commodity servers, often as a backup storage target.
Acronis Cyber Infrastructure 7.3.1 adds a VM migration service, read-only project access, and Debian 13/CentOS Stream 10 guest OS support.
└──▷ HOW TO FIND IT
Apply the update through the admin panel once nodes are in maintenance mode.
📍In the admin panel, go to SETTINGS › UPDATES, place nodes in maintenance mode, then apply the 7.3.1-54 update.
Adds read-only project access for self-service users, manageable via the admin panel and the vinfra command-line tool, enabling secure troubleshooting and monitoring without full access.
Introduces an early-access migration service supporting VMware vSphere VM migration with agentless transfer, Changed Block Tracking (CBT), OS morphing, IP/MAC addressMAC addressA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet. preservation, and parallel migration — available in both admin and self-service panels.
Veeam Backup & Replication is backup, recovery, and replication software for virtual, physical, cloud, and SaaS workloads.
Veeam Backup & Replication 13.0.2.29 adds platform support for RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 9.8/10.2 and Ubuntu 26.04 LTS via Veeam Agent.
DigiCert CertCentral adds new EKU options on cert request forms for Client Authentication support post-March 2027.
CertCentral public TLS/SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination. certificate request forms now include two new Extended Key Usage (EKU) options to retain Client Authentication capability after March 1, 2027.
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!Public TLS certificates issued on or after March 1, 2027 will no longer include the Client Authentication EKU by default.
Netskope v137.1.0 adds Anthropic Claude Enterprise support and API Data Protection to Compliance Logs
Adds Next Generation API Data Protection support for Anthropic Claude Enterprise, enabling policy creation, DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest., ongoing scan, and alerts.
Migrates Next Generation API Data Protection for ChatGPT Enterprise to the Compliance Logs Platform.
Deprecates the GET /api/v2/nsbrowser/configpolicies and related /configpolicies endpoints effective May 5, 2026.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!The GET /api/v2/nsbrowser/configpolicies, POST /api/v2/nsbrowser/configpolicies, GET /api/v2/nsbrowser/configpolicies/{id}, PUT /api/v2/nsbrowser/configpolicies/{id}, and DELETE /api/v2/nsbrowser/configpolicies/{id} endpoints are deprecated effective May 5, 2026, and will be removed by November 5, 2026.
Netskope Private Access 137.0 adds AIOpsAIOpsA practice that applies machine learning and data analytics to IT operations data—logs, metrics, events—so that cyber tools can automate anomaly detection, correlate alerts, and reduce noise at scale. App Audit UI, policy schedules, dual-stack DNS interception, steering exception bypasses, and URL rewrites for redirects.
Adds a Private Access AIOps Agent self-service UI to audit existing Private App Segments and create new segments and Real-time Policies
Adds Policy Schedules to Real-time Protection policies for Private App Segments to restrict access by day, date, and time
Enables dual-stack (IPv4 + IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only.) DNS interception on NPA Client for Windows and macOS without disabling IPv6
Supports URL rewriting for HTTP 30X Redirects in NPA Browser Access using public or custom hostnames
Adds Service & Destination Profile exception type under Settings > Security Cloud Platform > Traffic Steering > Steering Configuration to bypass NPA tunneling for specific destinations
R137.0.0 adds NPA AI Agent for App Audit self-service UI and SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. privileged user visibility enhancements.
Enhances SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management (SSPM) with increased visibility into privileged users
Netskope R137 adds AI Gateway dashboard, NPA steering bypasses, PQCPQCCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. key exchange, deepfake API, and SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. privileged user visibility.
Adds the AI Gateway Dashboard in Advanced Analytics to monitor traffic for AI agents and LLMsLLMsA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. through deployed AI Gateways.
Provides a Deepfake Detection On-Demand API to submit audio, video, or image files for deepfake detection based on voice and facial features.
Enables NPA Steering Configuration exceptions via the new Service & Destination Profile exception type under Settings > Security Cloud Platform > Traffic Steering > Steering Configuration.
Adds X25519MLKEM768post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. key-exchange support in NG SWGSWGA Secure Web Gateway is a network proxy that inspects outbound web traffic, enforcing policy by blocking malicious sites, filtering content, and decrypting TLS — giving cyber tools a choke point for all user HTTP/S sessions., managed via feature flags ssl-server-pqc-key-exchange-alg and ssl-client-pqc-key-exchange-alg.
Introduces privileged user identification in SSPM with new filters on the Users page and updated metrics on the Apps page.
+3 moreshow less
Supports multi-file and folder uploads in Remote Browser Isolation (RBI) with a real-time progress File Transfer Info Bar.
Adds Enterprise Browser Sandboxed Clipboard mode selection (Full Sandbox, Read System Clipboard, Write System Clipboard) via UI controls and API.
Adds tenant-level Enterprise Browser version management via the ReleaseChannel browser configuration policy.
Varonis adds Actor Identity attribution for AWS, Databricks service principal isolation, and per-account Data Concentration control
Adds the Actor Identity field to the Activities page to reveal the real identity behind AWS activities (IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. users, assumed roles, services)
Enables configuration of dedicated service principals for each Databricks workspace during integration
Adds per-account toggle for Data Concentration to optimize scanning efficiency
3 details in Everything
6 more releases in this issue
· 2026-05-03 → 2026-05-31
Varonis adds Netskope integration, Nutanix NFS v3 support, exclusion flags for automatic labeling, and centralized DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops. request management.
Ingest Netskope Secure Web Gateway events via REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. to monitor web proxy activity
Monitor file operations on Nutanix storage platforms using NFS v3 event support
Exclude files or folders from automatic classification-based labeling by applying exclusion flags
Regenerate collector activation codes at any time with automatic revocation of unused prior codes
Count only files located directly under a selected folder for precise top-level reporting
+1 moreshow less
Access the new Requests page in Varonis Analytics to manage all Data Access Governance (DAG) requests
Clevis v23 adds TPMTPMA dedicated hardware chip, standardized by the Trusted Computing Group, that stores cryptographic keys and measurements in tamper-resistant silicon, giving cyber tools a root of trust that software alone cannot fake. 1.2 support and a build option to make the tpm1 pin optional.
└──▷ GET THIS VERSION
$ git clone --branch v23 https://github.com/latchset/clevis.git
# already have the repo? check out this version:$ git checkout v23
Adds TPM 1.2 support via a new tpm1 pin, enabling Clevis-based automated decryption on legacy hardware with TPM 1.2 chips.
Adds a Meson build option to make the tpm1 pin optional, allowing packagers and builders to exclude TPM 1.2 support from the binary.
Bytebase 3.18 adds Google Chat webhook, AWS RDS IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. auth, MariaDB DML rollback, and --custom-header CLI flag.
└──▷ GET THIS VERSION
$ git clone --branch 3.18.0 https://github.com/bytebase/bytebase.git
# already have the repo? check out this version:$ git checkout 3.18.0
require_2fa is renamed to require_mfa; plan_spec_update is replaced by plan_update with a restructured payload; Issue.ApprovalStatus is moved to top-level ApprovalStatus
Bytebase Terraform provider 3.18.0 adds write-only sensitive fields and a provider-level custom_header block
New API endpoint or method RetryIssueApproval allows retrying issues stuck in CHECKING status
Adds support for MariaDB DML rollback using prior-backup, matching MySQL behavior
Adds CosmosDB cross-partition query support
+2 moreshow less
Bytebase Action now accepts the --custom-header flag for header-based access proxies in CI/CD pipelines
Adds Google Chat as a project webhook destination
7 details in Everything
└──▷ BREAKING ON UPGRADE
!The require_2fa field on WorkspaceProfileSetting is renamed to require_mfa; callers updating workspace profile settings via SettingService.UpdateSetting must update their config or IaCIaCInfrastructure as Code: the practice of defining and provisioning compute infrastructure through machine-readable config files rather than manual processes, giving cyber tools repeatable, version-controlled environment setup. to use the new name.
!IssueComment.plan_spec_update is replaced by plan_update; consumers of IssueService.ListIssueComments or issue activity events must read plan_update.from_specs / to_specs instead of the previous PlanSpecUpdate structure.
!The nested enum Issue.ApprovalStatus is removed and moved to top-level bytebase.v1.ApprovalStatus; clients referencing the nested type by name (e.g., generated Go or TS types) must update imports or type references.
Cyera adds integrations for AWS Security Hub, Upwind, Clutch, Atlan, Euno, Grip Security, Reco AI, Zafran, and imPAC.
Adds AWS Security Hub integration to extend deep data and risk context into cloud security posture workflows.
Adds Upwind integration for non-human identitynon-human identityA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls. risk context.
Adds Clutch integration for triage and remediation workflows.
Adds Atlan integration for data catalog and lineage context.
Adds Euno integration for risk prioritization.
+1 moreshow less
Adds Grip Security integration for vulnerability prioritization workflows.
Cyera introduces DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. Trends to shift focus from single alerts to recurring exposure patterns for root-cause remediation
Adds DLP Trends feature that surfaces repeat patterns of exposure rather than individual alerts
Zscaler Workflow Automation adds notification template merge tags, incident attachments column, and CSV user data API endpoints.
Adds Sender Email and Subject merge tags to Notification Templates for email, Slack, and Microsoft Teams notifications
Adds an Attachments column to the Incidents page incidents table to display file names for Source DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. type Email incidents
Adds GET /dlp/v1/csv-user-data/{csv_user_data_uuid}/download endpoint to retrieve pre-signed S3 bucket links for CSV user attributes and validation errors
Adds POST /dlp/v1/csv-user-data/import endpoint to import end user attributes as a multipart CSV file
Private Access adds OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. enrollment support for Network Connectors
ZPA adds high-performance hardware appliances for App Connectors and Private Service Edges with 3+ Gbps throughput.
High-Performance Hardware Appliances for App Connectors and Private Service Edges are available in Limited Availability
Updated AWS Images for Private Service Edge and Private Cloud Controller now ship STIGSTIGA configuration standard published by DISA that specifies hardening requirements for a given OS, application, or device, giving cyber tools a concrete checklist to audit or enforce against.-hardened RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 9 images with FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments. enabled by default
ZPA adds Business Continuity, Private Cloud, Controller Group, Version Profile, Enrollment Cert, and Browser Access Groups management APIs; supports external IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access.IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. selectio
Adds GET /mgmtconfig/v1/admin/customers/{customerId}/businessContinuitySettings, PUT .../BusinessContinuitySettings/{id}, GET .../metadata, and GET .../certificate endpoints for programmatic Business Continuity settings management
Adds GET, POST, GET .../{privateCloudId}, PUT .../{privateCloudId}, and DELETE .../{privateCloudId} endpoints on /mgmtconfig/v1/admin/customers/{customerId}/privateCloud for Private Cloud Management
Adds GET /mgmtconfig/v1/admin/customers/{customerId}/privateCloudController/{privateCloudControllerId} and PUT .../{privateCloudControllerId} for private Cloud Controller management
Adds POST, DELETE, GET .../{privateCloudControllerGroupId}, DELETE .../{privateCloudControllerGroupId}, and PUT .../{privateCloudControllerGroupId} endpoints on /mgmtconfig/v1/admin/customers/{customerId}/privateCloudControllerGroup for controller group management
Adds GET /mgmtconfig/v2/admin/customers/{customerId}/enrollmentCert endpoint for Enrollment Certificates retrieval
+4 moreshow less
Adds GET /zpn/api/v2/admin/customers/{customerId}/lssConfig endpoint for Log Streaming (LSS) Configuration
Adds GET /mgmtconfig/v1/admin/customers/{customerId}/visible/versionProfiles, GET .../versionProfile, GET .../appConnectorGroup, and GET .../serviceEdgeGroup endpoints for Version Profiles, App Connector Group, and Service Edge Group management
Adds GET /mgmtconfig/v1/admin/customers/{customerId}/browserAccessGroups endpoint for Browser Access Groups Management
Adds support to select the External IAM IdP when configuring a policy or a Microtenant
9 details in Everything
└──▷ BREAKING ON UPGRADE
!During migration, external IdP configurations are view only. After migration is complete, IdP configurations are inactive but can be restored if necessary.
ZIA adds API endpoints to manage Secure Message Processing Center (SMPC) instances and a new admin role permission.
Adds GET /smpcInstance and PUT /smpcInstance/dc API endpoints to update SMPC instance details by data center ID and retrieve status for all instances in a data center
Adds ZS_BUSINESS_CONTINUITY enum value to the permissions field of the AdminRole model for the /adminRoles APIs
ZIA adds Salesforce file restore, Private Access sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls., AI/ML source filtering, and expanded proxy/API endpoints
Adds POST /proxies endpoint to add up to 255 third-party proxies via API
Adds GET /devices, GET /devices/{id}, GET /integrationPartners, GET /integrationPartners/crowdStrike/endpoints, POST /integrationPartners/crowdStrike/endpoints, and GET /integrationPartners/crowdStrike/whitelistedBaseUrls endpoints for device and partner data
Adds POST /integrationPartners/microsoftDefender/endpoints endpoint to configure Microsoft Defender for Endpoint integration
Adds GET /integrationPartners/sandbox/report/{md5} endpoint to retrieve Sandbox Detail Report MD5 hash
Adds support for up to 200 MB EXE and DLLDLLA Windows file format containing compiled code and data that multiple programs can load and share at runtime, letting cyber tools inject functionality into other processes or hook system calls. files in Advanced Sandbox
+8 moreshow less
Enables sandboxing of unknown files uploaded to Private Access (ZPA) assets via Advanced Sandbox
Adds AI/ML Detection Source filter and column to Web Insights Logs
Adds Top AI/ML Detection Source by Security Incidents widget and AI/ML Detection Source field to Threat Incidents Analytics
Adds AI/ML Detection Source filter for NSS/Cloud NSS feeds and %s{ai_ml_detection_src} field in Feed Output Format
Adds support for Public, Private, and Communication site types on SharePoint Tenants Components page
Adds Exempted DLP Identifier filter and column to Web Insights Logs for DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. scan timeouts
Adds %d{exempt_dlpidentifier} field to NSS/Cloud NSS Feed Output Format
Adds Restore remediation action in SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Assets page to restore quarantined Salesforce files
Adds NSS integration to stream Authentication Service logs to external SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. systems
ZPA adds FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments.-enabled STIGSTIGA configuration standard published by DISA that specifies hardening requirements for a given OS, application, or device, giving cyber tools a concrete checklist to audit or enforce against.-hardened OVAOVAAn Open Virtualization Appliance file — a single portable package containing a virtual machine disk image and its configuration metadata, standardized by the DMTF, letting cyber tools ship as ready-to-run VM bundles. images for App Connector, Private Service Edge, and Private Cloud Controller on RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 9.
ZPA Private Access adds B2B Federation and LSS data types for VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. traffic
Adds Support for Business-to-Business (B2B) Federation to enable cross-tenant collaboration and application sharing between ZPA customers
Adds new user status and traffic flow data types to the Log Streaming Service (LSS) for VPN (For Legacy Apps)
Adds Zscaler URL Category Test URLs for verifying HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. URL policy and SSLSSLA cryptographic protocol for encrypting network connections, now deprecated in favor of TLS but whose name persists colloquially. Cyber tools reference it when handling HTTPS or other encrypted-channel inspection and termination./TLS Inspection validation
ZIA adds AI/ML detection source filtering, Sandbox for ZPA assets, Salesforce file restore, and new SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. controls
Adds adminScopeSupport query parameter to GET /groups and GET /groups/lite endpoints and USER_GROUP enum value to AdminScope/AlertDefinition scope fields.
Extends Advanced Sandbox to analyze EXE and DLLDLLA Windows file format containing compiled code and data that multiple programs can load and share at runtime, letting cyber tools inject functionality into other processes or hook system calls. files up to 200 MB for Internet & SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. traffic.
Enables sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls. of unknown files uploaded to Private Access (ZPA) assets for organizations with Advanced Sandbox.
Adds AI/ML Detection Source filter, column, and field across Web Insights Logs, Threat Incidents table, Details tab, and NSS Cloud NSS feeds using %s{ai_ml_detection_src}.
Displays SharePoint site type (Public, Private, Communication) for groups on the Manage SaaS Application Tenants > Components page.
+10 moreshow less
Adds Exempted DLP Identifier filter and column to Web Insights Logs and %d{exempt_dlpidentifier} field to NSS Feed Output Format.
Introduces Restore remediation action in the SaaS Security Assets page to restore quarantined Salesforce files.
Increases third-party proxy and gateway limit to 255 via POST /proxies API and Admin Console.
Adds cloud application instance support for Google Gemini and Microsoft Copilot.
Adds Last Functionally Updated filter and Starting Prompt/'Ending Prompt' fields for Workday custom reports.
Creates, updates, deletes, and retrieves Malware Protection policies via GET /malwarePolicy and PUT /malwarePolicy endpoints.
Manages NSS Collector servers (CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information.) via GET /nssCollectors, POST /nssCollectors, PUT /nssCollectors/{id}, and DELETE /nssCollectors/{id}.
Retrieves supported browser versions, updates Smart Browser Isolation, and manages Votiro CDR policies/tokens via new API endpoints under /browserControlSettings and /isolationVotiroCdr.
Manages custom IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection. signature rules (CRUD, export/import, validation) via new endpoints under /ipsSignatureRules.
Expands SSPM coverage for Bitbucket with 9 new controls, Confluence with 5, and Jira with 5.
ZIA adds Bitbucket, Confluence, and Jira SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. controls to Advanced SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management.
Expands Advanced SaaS Security Posture Management (SSPM) coverage for Bitbucket with 9 new SSPM controls.
Expands Advanced SaaS Security Posture Management (SSPM) coverage for Confluence with 5 new SSPM controls.
Expands Advanced SaaS Security Posture Management (SSPM) coverage for Jira with 5 new SSPM controls.
Zscaler Deception adds SCADA/IoTIoTA collective label for internet-connected physical devices — sensors, cameras, routers, appliances — that tools target because they run embedded firmware with limited patching and broad network exposure. datasets and protocols, granular safe process control, and new ThreatParse detection rules.
Adds DNP3DNP3A serial and TCP/IP communication protocol used in industrial control systems, especially power grids and water utilities, to let control software poll and command field devices like sensors and switches., IEC 61850, Profinet, and OPC UA protocol support for deploying SCADA/IoT decoys
Adds static application datasets for Commvault, Grafana, IBM Maximo, Workday, Tableau, ActiveMQ, Splunk, Cisco FMC
Adds SCADA/IoT decoy datasets: DNP3 Water Treatment RTU, IEC 61850 Substation Protection Relay, Oil & Gas Pipeline Compressor Station RTU, SIEMENS S7 1500 PLC, and ABB AC500 PLC
Adds new ThreatParse rules for DNS reconnaissance, including DNS Active Directory SRV Record Reconnaissance, DNS ANY Record Enumeration, DNSSEC Probe and NSEC Zone Walk Attempt, DNS NS Record Enumeration, DNS NULL Record Query, DNS PTR Reverse Lookup, DNS SOA Record Enumeration, DNS Standard Record Enumeration (A/AAAA/HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate.), DNS TXT Record Query, DNS WPAD Query, and DNS Zone Transfer Attempt (AXFRAXFRA DNS zone transfer request that asks a nameserver to send every record in a zone at once, letting cyber tools enumerate all hostnames in a domain if the server is misconfigured to allow it./IXFR)
Adds granular safe process configuration by detection type and subtype for Windows and macOS Landmine agents
+1 moreshow less
Updates Terraform user agent configuration for GCP decoy deployments to reduce false positive events
ZIA adds 19 new SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. controls for Bitbucket, Confluence, and Jira to expand SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. security posture coverage.
Expands Advanced SSPM coverage for Bitbucket with 9 new controls
Expands Advanced SSPM coverage for Confluence with 5 new controls
Expands Advanced SSPM coverage for Jira with 5 new controls
ZDX adds Decline button for scripted confirmations and renames Hosted Monitoring to Managed Monitoring with dashboard enhancements.
Adds Decline button option when configuring scripts with End-User Confirmation
Adds ISP or ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses. view to Network Intelligence dashboard based on probe count criteria
Endpoint DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. adds support for Japanese predefined DLP dictionaries on Windows and macOS
Adds Addresses (Japan), First Names (Japan), Full Names (Japan), and Last Names (Japan) to the list of supported predefined DLP dictionaries, enabling out-of-the-box detection for Japanese PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. without manual rule creation.
ZIA adds DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. dict support for Japan, Gen AI prompt capture for QuillBot/Google, and new API endpoints for IPSIPSAn intrusion prevention system, inspecting activity and blocking traffic or actions that match its security rules. It adds active enforcement to detection./NSS/Malware.
Adds GET /malwarePolicy and PUT /malwarePolicy endpoints to retrieve and update the Malware Protection policy for an organization
Adds GET, POST, PUT, and DELETE endpoints (/nssCollectors) to manage NSS Collector servers via API
Adds support for Japanese predefined DLP dictionaries in Endpoint DLP policy rules: Addresses (Japan), First Names (Japan), Full Names (Japan), Last Names (Japan)
Adds promptCaptureEnabled Boolean field to the WebApplicationRule model in /webApplicationRules API to control Gen AI prompt capture
Adds enableQuillbotAIPrompt and enableGoogleAIPrompt Boolean fields to the AdvancedUrlFilteringCloudAppOptions model in /advancedUrlFilterAndCloudAppSettings API
+6 moreshow less
Adds GET /ipsSignatureRules, POST /ipsSignatureRules, PUT /ipsSignatureRules/{id}, DELETE /ipsSignatureRules/{id} endpoints for managing custom IPS signature rules
Adds GET /ipsSignatureRules/export, GET /ipsSignatureRules/import, POST /ipsSignatureRules/import, and POST /ipsSignatureRules/validateRuleText endpoints for IPS rule export, import, and validation
Adds browser version discovery via GET /browserControlSettings/supportedBrowserVersions and Smart Isolation policy updates via PUT /browserControlSettings/smartIsolation
Adds Votiro CDR credential management via GET, PUT, DELETE /isolationVotiroCdr/tokenConfig and policy retrieval via GET /isolationVotiroCdr/policies
Extends cloud application instance creation to Google Gemini and Microsoft Copilot
Adds Instance Discovery Report support for Microsoft Azure with Domain, Tenant, and Resource levels
ZIA adds Bitbucket, Confluence, Jira SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. controls and Workday filter support.
Expands Advanced SSPM coverage for Bitbucket with 9 new controls.
Expands Advanced SSPM coverage for Confluence with 5 new controls.
Expands Advanced SSPM coverage for Jira with 5 new controls.
Adds Last Functionally Updated filter and Starting Prompt/'Ending Prompt' fields for Workday report parameters.
ZIA expands Slack DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. incident forwarding to chat, adds SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. controls for Google Workspace, and supports new cloud app instances.
Enables forwarding of Slack chat-based DLP policy incidents to Zscaler Incident Response and Zscaler Workflow Automation
Expands Advanced SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management (SSPM) coverage for Google Workspace with 24 new controls
Adds Cloud Application Instances support for Google Gemini and Microsoft Copilot
Zscaler Workflow Automation adds CSV export for Incidents and SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. integration via ServiceNow.
Adds CSV export capability on the Incidents page to download displayed incidents.
Enables SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Security Posture Management (SSPM) integration in Workflow Automation with support for ServiceNow ticketing.
AI Guard 2.15.1 adds custom RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. roles and Azure Data Explorer log export via Event Hub.
Adds support for custom roles and granular permissions in Role-Based Access ControlRole-Based Access ControlRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. (RBAC), replacing the fixed Administrator, Editor, and Viewer model
Enables streaming event metadata and content to Azure Data Explorer (ADX) via Azure Event Hub for advanced analytics and long-term storage
ZPA adds client hostname to VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. Connected Users and automated RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 9 OS update status UI for connectors
Adds hostname column to the VPN Connected Users page on private.zscaler.com and zpatwo.net
Adds OS Update Filter dropdown and OS Update status field with hover details in App Connector, Private Service Edge, Private Cloud Controller, and Network Connector detail views
Adds Last OS update time and OS updates enabled indicator to connector detail views for prebuilt RHEL 9.x images
ZIA adds Gen AI prompt configuration for QuillBot/Google AI and expanded Google Workspace SSPMSSPMSaaS security posture management, checking hosted applications for risky settings, excessive access and policy violations. It helps teams manage risks across their subscribed applications. controls
Adds enableQuillbotAIPrompt and enableGoogleAIPrompt Boolean fields to the AdvancedUrlFilteringCloudAppOptions model in /advancedUrlFilterAndCloudAppSettings API for Gen AI prompt support.
Adds promptCaptureEnabled Boolean field to the WebApplicationRule model in /webApplicationRules API to control prompt capture for generative AI apps.
Adds Capture Prompts option to Cloud App Control policy UI (Policies > Access Control > Internet & SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. > Policies > Cloud App Control Policy > Add > AI & ML Applications).
Expands SSPM coverage with 24 new controls for Google Workspace.
Adds DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. support for new PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. dictionaries: Argentina Uniform Bank Code, Cambodian National ID, Mexico BRFC, IRFC, and NSS.
+1 moreshow less
Adds collaboration scope (External, Internal, Any) configuration for Microsoft Teams DLP rules.
Sophos ZTNA Windows agent 2026.1 adds multi-domain-controller support with SRVSRVA DNS record type that advertises the hostname and port for a specific service, letting clients discover endpoints without hardcoded addresses.-based load balancing and clearer on-premises status display.
Supports configuring multiple domain controllers for the same domain, using SRV record priorities and weights for load balancing and failover.
Sophos Endpoint UI now shows ZTNA status as Inactive (On-premises mode) instead of Not configured when on-premises mode is detected.
vopono 0.10.17 ships an initial desktop GUIGUIA graphical user interface, controls such as windows, buttons and menus. It lets people use software visually rather than entering commands. with gamepad controls and improves Docker/UFWUFWA command-line frontend for Linux's iptables firewall, maintained by Canonical, that lets tools configure host-based packet filtering rules without writing raw iptables syntax. nftables firewall compatibility.
└──▷ GET THIS VERSION
$ git clone --branch 0.10.17 https://github.com/jamesmcm/vopono.git
# already have the repo? check out this version:$ git checkout 0.10.17
Adds initial vopono-gui for launching and monitoring vopono from a desktop GUI, including gamepad controls for Steam Deck testing and status discovery support in vopono_core (currently tested on XOrg).
Adds namespace-specific forwarding exceptions to active DOCKER-USER and UFW forward chains when using nftables, improving Docker/UFW firewall compatibility.
New end-to-end mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. between Client and Server Workloads using SPIFFESPIFFEAn open standard, maintained by the CNCF, for assigning cryptographic identities to workloads in dynamic infrastructure so services can authenticate each other without passwords or static credentials.X.509-SVIDX.509-SVIDAn X.509 certificate formatted to carry a SPIFFE Verifiable Identity Document, binding a cryptographic identity to a workload so cyber tools can authenticate services without passwords or static secrets. certificates
Adds X.509-SVID Credential Provider type that issues SPIFFE-compliant X.509X.509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols. certificates with URI SANs and configurable lifetime.
Adds mTLS Authentication method with the x509 Certificate scheme to Server Workloads for validating client certificates.
Enables Agent Proxy to establish outbound mTLS connections to Server Workloads using SPIFFE-compliant X.509-SVID certificates generated in memory.
3 details in Everything
8 more releases in this issue
· 2026-05-02 → 2026-05-21
MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. sessions can now be explicitly deleted via API; MCP protocol and app-level Prometheus metrics added.
Adds session deletion capability to enable clients to explicitly end MCP Identity Gateway sessions when finished.
Adds Prometheus metrics for MCP protocol-level errors and request failures.
Exposes application-scoped Prometheus metrics for MCP Identity Gateway observability.
Adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. discovery events, user identity fields, clearer failure reporting, and live authorization tracing.
Adds access.discovery event type to list Client and Server Workloads considered during access evaluation
Adds application.mcp.userId field to MCP Workload Events and corresponding User (MCP App Protocol only) filter in the Workload Events view
Changes Trust Provider attestation failure severity from Warning to Error
Improves access.credential event reason to identify which token expired and at which step
Adds live MCP Authorization Tracing view in the Reporting dashboard for real-time inbound authorization request diagnostics
Aembit Secrets Operator 1.31.314 updates its CRDsCRDsA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it. to v1 API.
Aembit Secrets Operator 1.31.298 adds Service Account and OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. auth, proactive renewal, and multi-namespace Helm installs.
Adds Kubernetes Service Account authentication using the operator’s in-cluster ServiceAccount token validated against the cluster’s OIDC endpoint
Adds OIDC symmetric key authentication (HS256) for custom claims and non-Kubernetes identity scenarios
Enables proactive credential renewal where credentials refresh at 80% of their TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit., or sooner when you configure a shorter refreshInterval
Allows multi-namespace install by supporting the same Helm release name across multiple namespaces on the same cluster without resource name conflicts
MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Identity Gateway 1.31 adds userId to workload events and client-initiated session termination via DELETE /mcp
Adds userId field to mcp.request and mcp.response workload events for authenticated clients, enabling user attribution in audit reports
Enables MCP clients to terminate sessions by sending an HTTP DELETE request to the /mcp endpoint
Aembit OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. and JWT-SVIDJWT-SVIDA SPIFFE Verifiable Identity Document encoded as a JSON Web Token, used to prove workload identity across trust boundaries where X.509 certificates are impractical, such as HTTP headers. dynamic claims now read custom env vars via AEMBIT_ENV_VAR_ALLOWLIST.
Adds AEMBIT_ENV_VAR_ALLOWLIST environment variable to Agent Proxy and Aembit CLI to explicitly allowlist which custom environment variables may be captured for OIDC and JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store.-SVID dynamic claims
Always-available Kubernetes variables (K8S_POD_NAME, K8S_NAMESPACE, KUBERNETES_PROVIDER_ID) are now usable in dynamic claims regardless of the allowlist
Oracle GA, HTTP proxy, dynamic env-var claims, and streaming S3 uploads in Aembit edge components
AEMBIT_ENV_VAR_ALLOWLIST environment variable enables Agent Proxy and Aembit CLI to gather dynamic claims from environment variables.
Oracle Database protocol support is now generally available, including mid-connection TLS and Prometheus metrics for credential injection events.
Agent Proxy and Aembit CLI add upstream HTTP proxy configuration with NO_PROXY support for gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. and Server-Workload-bound HTTP/HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. traffic.
Large file uploads to AWS S3 Log Streams are now supported via streaming AWS chunked signing, removing the previous upload size limit.
New account_id selector for the aws_iid node attestor enables scoping attestation to specific AWS accounts.
TLS support added to the Prometheus metrics sink for encrypted metric scraping.
Supports marking registration entry X509X509A standard defining the format of public-key certificates, maintained by the ITU-T, used by cyber tools to authenticate identities and establish encrypted connections over TLS and similar protocols.-SVIDs as non-prefetchable to control caching behavior.
Docker workload attestor now supports rootless Podman environments.
PROXY protocol support added for correct rate limiting when SPIRE sits behind load balancers.
+7 moreshow less
Agents can now fetch the X509-SVID for SPIFFESPIFFEAn open standard, maintained by the CNCF, for assigning cryptographic identities to workloads in dynamic infrastructure so services can authenticate each other without passwords or static credentials. attestation mode directly from the Workload API socket.
iss claim support added for JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store.-SVIDs (WIT-SVIDs).
Instance flag support added to spire-server and spire-agent CLIs for multi-instance deployments.
Warden v0.14.0 adds per-call actor attribution in audit logs, X-Warden-Provider header routing, HCL-declared audit devices, and new CLI commands/flags.
└──▷ GET THIS VERSION
$ git clone --branch v0.14.0 https://github.com/stephnangue/warden.git
# already have the repo? check out this version:$ git checkout v0.14.0
actors array on audit.Auth carries {subject, verified} entries from X-Warden-On-Behalf-Of header and RFC 8693RFC 8693An IETF standard defining the OAuth 2.0 Token Exchange flow, letting a service swap one token for another with different scopes, audience, or type — enabling delegation and impersonation without re-authenticating the user.act claim for per-call delegation tracking
warden status CLI subcommand reports init/seal/standby/leader/active-since/version via /v1/sys/health
Audit devices declared in server HCL config via audit "TYPE" "PATH" { description = "..." options = { ... } } block
:debug Docker image variant (gcr.io/distroless/static-debian12:debug-nonroot) for container introspection
CLI accepts Vault-style single-dash long flags (e.g., -format=json)
+5 moreshow less
-path long flag on every path-taking CLI command (e.g., audit enable -path=foo aws)
Server config warns and ignores unknown HCL keys instead of crashing startup
jwt_validation_pubkeys field in JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. auth config now validates against static PEM-encoded RSARSAThe oldest widely used public-key algorithm, for both encryption and signatures, with security resting on factoring large numbers. A large quantum computer would break it./ECDSAECDSAThe elliptic-curve signature algorithm behind most TLS certificates, blockchains and many hardware keys. It is one of the algorithms post-quantum signatures are meant to replace. keys
X-Warden-Provider header enables mount routing for non-agent clients without URL rewriting
/v1/sys/health and /v1/sys/leader expose is_leader, leader_address, active_time, ha_enabled, and version fields
10 details in Everything
└──▷ BREAKING ON UPGRADE
!-type flag removed from auth enable, provider enable, audit enable; TYPE must now be passed as a positional argument (e.g., -path=jwt-prod jwt)
!mode field removed from auth/{mount}/config; one of oidc_discovery_url, jwks_url, or jwt_validation_pubkeys must be provided
!X-Warden-Role header now takes precedence over any role embedded in the URL path
!is_self field renamed to is_leader on /v1/sys/health and /v1/sys/leader endpoints
!server_time_utc (int64) replaced by server_time (RFC3339 string) on /v1/sys/health endpoint
!Listener HCL: tls_enabled replaced by tls_disable; TLS is enabled by default; a listener must either disable TLS or supply cert/key files
!Audit auto-default device on first unseal is removed; audit devices must be explicitly declared in HCL or via API
1 more release in this issue
· 2026-05-21 → 2026-05-26
Omada Identity adds Resource Status filtering in analytics and improves context merging logic
└──▷ HOW TO FIND IT
Filter out deleted resources from analytics reports to ensure assignment data consistency.
📍In the Data Warehouse or Analytics query builder, filter on the new Resource Status field to exclude entries where status indicates deletion.
Adds Resource Status field to the Data Warehouse resource dimension, enabling filtering of deleted resources in reports and Omada Identity Analytics.
Implements automatic merging of contexts generated with different identifier formats, using the latest Enterprise Server value as authoritative, and includes ContextAssignment and ContextOwner data in migrations.
Okta Identity Engine 2026.05 adds GA attribute sync, self-service EA for recovery, and SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. PIV support
PIV Identity Provider now supports dynamic user matching using the SHA-256 digest algorithm, which is GA in Preview.
Managed connections are renamed to resource connections in Production with GA status, impacting existing configuration references.
2 details in Everything
└──▷ BREAKING ON UPGRADE
!The term managed connections has been renamed to resource connections in the general release; existing documentation or scripts referencing the old term may need updates.
May 14, 20263 releases · 2026-05-07 → 2026-05-14Stable
Adds Source Event links to Slack and email alerts for Directory Insights event pages.
└──▷ HOW TO FIND IT
Jump from a Slack alert or email about a device anomaly directly to the relevant Directory Insights context without manual navigation.
📍In the JumpCloud console, go to Devices › Monitoring and Alerts, then review your Slack or email notifications. Each message now contains a Source Event link; click it to open the specific event's Directory Insights page.
2 more releases in this issue
· 2026-05-07 → 2026-05-14
New validation layer for macOS custom .pkg deployments enabling Managed App lifecycle support and automatic removal on unenrollment
└──▷ HOW TO FIND IT
Leverage the new validation layer for a custom .pkg deployment to automatically gain control of user-installed apps and ensure removal upon unenrollment.
📍N/A (Service configuration via UI/API)
Adds validation layer for macOS custom .pkg deployments to assert lifecycle ownership via Apple's Managed App lifecycle
Enables App Takeover: JumpCloud can assume management of existing manually installed applications without reinstall
Ory Network adds OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. activity statistics and case-insensitive organization-domain filtering; Kratos improves courier analytics and SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. group consistency.
Adds event_name and time_window URL parameters to the Events page to pre-apply filters
Adds token activity stats (issued, refresh tokensrefresh tokensA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API. issued, exchange errors) to the OAuth2 clients page
Adds message delivery stats (delivered, abandoned) and combined activity chart filters to the email delivery and Activity pages
Makes /organizations GET endpoint domain query parameter case-insensitive
4 details in Everything
4 more releases in this issue
· 2026-05-11 → 2026-05-29
Adds services.oauth2.config.oauth2.token_prefix config key to set a custom prefix for OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. tokens in Enterprise projects
Enterprise plans can create and manage HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. or AWS SNSSNSAmazon Simple Notification Service, a managed pub/sub messaging service from AWS that lets tools fan out alerts or events to multiple subscribers — queues, email, HTTP endpoints, or Lambda functions — without managing broker infrastructure. event streams in the Ory Network Console under Authentication → Event streams.
Adds Refresh Token Rotation Grace Reuse Count setting on the OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. configuration page to control refresh tokenrefresh tokenA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API. reuse limits via the Console
Expands Landlock sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls. in Kratos to cover the migrate sql and courier subcommands, restricting filesystem access beyond just serve
Kratos OEL applies a Landlock filesystem sandbox to kratos serve on supported Linux kernels, restricting access to configured runtime paths.
On Linux 5.13+, the Kratos Jsonnet worker applies an empty Landlock layer, denying path-based filesystem access; other platforms are unaffected.
Enforces workspace plan project limits on the move endpoint, returning 402 Payment Required when capacity is exceeded
Rewrites phone trait values to E.164 format in webhook payloads instead of preserving raw user input
4 details in Everything
└──▷ BREAKING ON UPGRADE
!Symlink targets that change at runtime after startup will cause kernel EPERM denials because Landlock rules attach to the inode at activation; kratos serve must be restarted after any certificate or config symlink swap.
Ory v26.2.10 adds OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. provider test flows, Kratos bulk session management, and Oathkeeper trace context logging.
Adds POST /admin/test-login-flows endpoint for pre-production OIDC provider validation
Adds action: "disable"|"delete" field to POST /admin/sessions endpoint for bulk session management in Kratos
Adds rule_id, otel.trace_id, and otel.span_id fields to Oathkeeper log entries
Ory Network Global Region adds explicit identity-region placement; Account Experience gains a setting to hide the registration link.
For Ory Network Global Region, the admin identity API accepts region for explicit data placement, subject to the project home-region boundaries.
default_region organization setting and Jsonnet region mapper output supported for Enterprise-auth SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. (SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave., SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider., OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user.).
Self-service responses now include read-only region field in /sessions/whoami and embedded identity objects.
Show registration link on login page switch added to Ory Console UI theming settings to hide Sign up link while keeping registration active.
hide_registration_link optional config field added to ProjectConfiguration for self-hosted @ory/elements-react consumers.
Nudge Security adds support for Clockify, Acronis, and OneLogin connected apps to centralize SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. visibility.
Adds Clockify as a supported connected app integration
Adds Acronis as a supported connected app integration
Adds OneLogin as a supported connected app integration
Adds SSH hostkey lookup for federated authentication in Connectors Agent endpoints.
└──▷ GET THIS VERSION
$ git clone --branch version/2026.2.4 https://github.com/goauthentik/authentik.git
# already have the repo? check out this version:$ git checkout version/2026.2.4
3 more releases in this issue
· 2026-05-12 → 2026-05-28
SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. provider adds support for interactive OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs.; SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. unified endpoint now handles XML declarations.
└──▷ GET THIS VERSION
$ git clone --branch version/2026.5.0 https://github.com/goauthentik/authentik.git
# already have the repo? check out this version:$ git checkout version/2026.5.0
Adds interactive_oauth2 configuration to the SCIM provider to allow interactive OAuth2 flows
Enables the SAML unified endpoint to handle incoming XML declarations
Adds cross-provider token introspection for OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. and configurable device scope clipping.
└──▷ GET THIS VERSION
$ git clone --branch version/2026.2.3 https://github.com/goauthentik/authentik.git
# already have the repo? check out this version:$ git checkout version/2026.2.3
providers/oauth2 allows cross provider token introspection for federated providers
providers/oauth2 clips device authorization scope against the provider's ScopeMapping set
Adds ES384 to enterprise license algorithms and continuous login flows for OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user./SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider.
└──▷ GET THIS VERSION
$ git clone --branch version/2025.12.5 https://github.com/goauthentik/authentik.git
# already have the repo? check out this version:$ git checkout version/2025.12.5
ES384 is now an available algorithm for the enterprise license signature
Adds auth_header support for passing the device code flow client ID during OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs.Device Authorization GrantDevice Authorization GrantAn OAuth 2.0 flow for devices that lack a browser or keyboard: the device gets a short code, displays it to the user, and polls the authorization server while the user approves on a separate device.
1Password SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Manager 2026.05 adds AI spend alerts, Google Chat integration, and App Roles for better visibility
(Closed beta) AI Spend – Alerting Against Configured Budgets: Users can now receive alerts when AI spend approaches or exceeds configured budgets, enabling proactive cost management.
Google Chat Integration: SaaS Manager now integrates with Google Chat, enabling teams to receive notifications and usage data through their Google Chat workspace.
App Roles: App role views now separate Spend and Contracts data for clearer role-based access and reporting.
3 details in Everything
└──▷ BREAKING ON UPGRADE
!Removed the Hex provisioning feature, which is no longer supported.
4 more releases in this issue9 more releases in this issue · 2026-05-13 → 2026-05-31
1Password for Mac 8.12.21 adds Codex/MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. integration, Bitwarden CSV import improvements, and multi-browser detection.
Enables direct interaction with 1Password Environments via Codex using a local MCP server (beta)
Improves support for importing data from Bitwarden using CSV files
Shows a list of additional browsers detected on the computer to easily connect them
1Password in the browser 8.12.20 adds independent passkeypasskeyPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices. settings and a migration banner for family account transfers.
Passkey filling and passkey saving are now separate settings, so administrators can enforce each one independently
SailPoint adds Quick Compliance connectors, the Serial Loop operator, and Microsoft Entra SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. connector support for Custom Security Attributes.
Identity Security Cloud now supports 8base, Calendly, Elasticsearch, Pulumi, and Scalr as Quick Compliance connectors for read-only account and entitlement aggregation
Workflows introduces the Serial Loop operator with While and For loop types (up to 1,000 iterations) for sequential execution of input list items
Microsoft Entra SaaS connector can now be configured for Activity Insights
Microsoft Entra SaaS connector now supports reading Custom Security Attributes (CSAs) for Service Principals, User-Assigned Managed Identities, and System-Assigned Managed Identities
4 details in Everything
2 more releases in this issue
· 2026-05-15 → 2026-05-29
SailPoint adds Claude Enterprise connector, Quick Compliance sources, inline template variable selector, and custom user level entitlements
└──▷ HOW TO FIND IT
Quickly configure read-only connections to new sources like Discord for account aggregation without full connector setup.
📍Go to Quick Compliance sources in Identity Security Cloud and select Discord from the list of supported connectors.
View available template attributes when customizing email templates directly in the editor.
📍Type '${' in the email template editor to open the inline variable selector.
Enable a newly published custom user level as an access request entitlement.
📍Publish a custom user level in Identity Security Cloud; the system automatically generates a corresponding entitlement that can be enabled for access requests.
Adds Codemagic, Discord, Gravitee, impact, LightSpeed, Scaleway, and SingleStore as new Quick Compliance connectors for expedited read-only account aggregation.
Adds a notifications icon and inbox to Identity Security Cloud.
Enables inline variable selector for email templates by typing ${ in the editor to view available template attributes.
Introduces the SailPoint Claude Enterprise connector with a beta API for importing Managed Agents.
Allows publishing custom user levels to generate corresponding entitlements that can be enabled for access requests when entitlement requests are enabled globally.
+7 moreshow less
Adds support for sorting custom user level permissions by category or name in ascending/descending order.
Updates UI so the Identity Security Cloud navigation bar is always visible on specific configuration pages.
Moves the Resource Center icon to the top-right corner of the app as a lightbulb icon in MySailPoint.
Adds quick filters to the Aggregation Activity page.
Adds Microsoft Windows Server 2025 support for IQService.
Adds Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. Domain Services (AD DS) functional level 2025 support.
Updates Microsoft Entra SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. connector Machine Identity Schema with creator and last_modified_by attributes for Azure AI Foundry Agents.
New Quick Compliance connectors, SAP GRCGRCGovernance, Risk, and Compliance — a framework for aligning IT controls with business policy, regulatory requirements, and risk management so organizations can audit and report on their posture systematically. 12 SPS31 support, and identity details utility for V2 templates.
└──▷ TRY IT
Retrieve identity details within a V2 template using the new utility functions.
$ $__util.getIdentityDetailsByID($someIdentityId)
Adds Apollo, Google Classroom, Grafana, MediaSilo, MSP360, and Postman as Quick Compliance connectors
Adds automatic revocation configuration for SharePoint Online and OneDrive records in Data Access Security campaigns
Adds GRC 12 SPS31 support to the SAP GRC connector
Adds credential provider support to Deep Governance, Discovery, and Quick Compliance SaaSSaaSSoftware delivered over the internet and run on the provider's infrastructure, so the buyer pays a subscription instead of installing or operating anything locally. Connectors
Adds Automation Anywhere platform support to the RPA Connector
+3 moreshow less
Adds workflow execution limit notifications with filtering capability
Enables custom approval fields display for Slack integrations
Adds $__util.getIdentityDetailsByID and $__util.getMultipleIdentitiesDetailsByID template utilities
Teleport v18.8.2 adds SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave.-synced access list badges in web UI and improves reliability of Okta assignments processing
└──▷ GET THIS VERSION
$ git clone --branch v18.8.2 https://github.com/gravitational/teleport.git
# already have the repo? check out this version:$ git checkout v18.8.2
└──▷ HOW TO FIND IT
Identify which access lists are managed via SCIM rather than manually within the Teleport web UI.
📍Log in to the Teleport web console, navigate to Access Lists, and look for the badge next to list names.
SCIM-synced access lists now display a badge in the web UI to distinguish them from manually managed lists.
Okta assignments processing has been improved for greater reliability during synchronization.
2 details in Everything
2 more releases in this issue
· 2026-05-12 → 2026-05-22
View the leaf cluster name in your terminal MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. prompt when authenticating to a resource in a multi-cluster topology.
📍# tsh will now display the leaf cluster name in the interactive prompt
# Example output:
# Cluster: prod-us-east
# Cluster (leaf): prod-eu-west
# Username: admin
kubernetes.join_method allow rules now support service_account_names and namespaces with wildcard support for granular cluster joining control.
App access upstream response-header cap increased to 1 hour, enabling long-running HTTP requests through Teleport to complete successfully.
MFA prompts in tsh and Teleport Connect display the leaf cluster name for resources belonging to a leaf cluster.
Web app access via Device Trust now serves an HTML page (instead of plain text) when the browser originates from an untrusted device.
Adds VNetVNetA private, isolated network hosted inside Microsoft Azure that lets virtual machines and services communicate with each other and with the internet under user-defined IP ranges and routing rules. for Linux, tsh MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone. via browser, bound keypair joining for agents, and session summaries search.
└──▷ GET THIS VERSION
$ git clone --branch v18.8.0 https://github.com/gravitational/teleport.git
# already have the repo? check out this version:$ git checkout v18.8.0
Extends Teleport VNet support to Linux workstations
Delegates tsh MFA checks to the browser for passkeypasskeyPhishing-resistant sign-in credentials built on FIDO2/WebAuthn: the device holds a private key and proves possession instead of the user typing a password. They sync across a user's devices./password manager use
Adds bound keypair join method support for arbitrary Teleport agents
Enables natural language search of session summaries via new Identity Security CLI tooling
Supports RDPRDPA Microsoft protocol that lets a user view and control a remote Windows desktop over a network, giving cyber tools a standard channel to audit, attack-simulate, or monitor Windows systems remotely. connections to Windows hosts in different Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. domains
+8 moreshow less
Adds Terraform module support for AWS EKSEKSAmazon's managed Kubernetes service, run by AWS, that handles control-plane provisioning so teams can deploy containerized workloads without operating the underlying cluster infrastructure themselves. discovery at the account level
Adds Terraform configuration generation for access list workflows in the web UI
Permits per-machine and per-user installation modes for Teleport Connect on Windows
Shows specific IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. roles available during AWS privilege escalationprivilege escalationGaining permissions beyond those an account or process initially had. It can turn limited access into administrator control or access to another user's resources. requests in Access Requests
Adds tsh beams subcommand for the Beams public beta
Extends tctl discovery nodes to include Azure VM resources for troubleshooting enrollment
Adds support for WorkloadIdentity with --apply-on-startup and --bootstrap flags in tbot
Introduces user traits filtering in the web UI Access List creation wizard
13 details in Everything
└──▷ BREAKING ON UPGRADE
!Teleport Connect Windows now only supports automatic upgrades; downgrades must be performed manually.
!The environment variables TELEPORT_CDN_BASE_URL and TELEPORT_TOOLS_VERSION are deprecated for Teleport Connect Windows updates; configure via system policy registry keys under HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER\SOFTWARE\Policies\Teleport\TeleportConnect.
!Automatic updates in Teleport Connect no longer allow app version downgrades (applies to all platforms).
New CMMC scoping module, automated GCC HighGCC HighA Microsoft 365 cloud environment restricted to US government contractors handling controlled unclassified information, meeting compliance requirements like ITAR and DFARS that standard commercial tenants cannot satisfy. config, conditional policy tokens, and enhanced Virtual Desktop support
└──▷ HOW TO FIND IT
Configure conditional policy sections to only display for GCC High environments.
📍Use Conditional Tokens in the Policy Editor to set visibility based on 'connected integrations == GCC High'.
Automate CMMC prerequisite configurations for Microsoft GCC High tenants.
📍Link your Microsoft GCC High integration in Secureframe to trigger automated MFA and conditional access policy setup.
Manage personnel exclusion for a specific outdated email domain within one integration.
📍Go to Integration Settings › Filter Personnel and add an email filtering rule for the specific domain.
Adds a Scoping Module to guide CMMC compliance program scope definition with audit-ready justifications.
Unlocks Defense Navigator step-by-step guidance for the full CMMC readiness process based on prerequisites.
Automates GCC High configurations (MFAMFAMulti-factor authentication, requiring proof from different categories, such as a password and a hardware key, to sign in. It reduces reliance on a password alone., conditional access, audit logging) via Microsoft APIs for CMMC.
Auto-populates SSPSSPA System Security Plan — a formal document required by NIST SP 800-18 that describes how a federal system meets its security controls, giving cyber tools a structured artifact to parse or generate for compliance workflows. implementation statements from scoping decisions and connected integrations.
Updates CMMC Level 2 framework with revised control mappings and automated tests for GCC High, Google Workspace, Federal MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies., and Virtual Desktops.
+5 moreshow less
Enables Common Access Card (CAC) authentication on Windows 11 virtual desktops with automatic certificate chain configuration.
Introduces Conditional Tokens to show or hide policy sections based on connected integrations or frameworks.
Changes Upload Tests expiry logic to depend on when work was performed, flagging expired evidence instead of auto-archiving.
Adds integration-level email filtering rules for personnel management.
Allows resetting existing employee policy acknowledgments directly during policy save operations.
Drata adds automatic role synchronization from IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. groups via the New Experience
Adds IdP Group Mappings section under Settings → Role Administration to map IdP groups to Drata roles.
Enables automatic, continuous syncing of Drata role assignments based on IdP group membership changes.
2 details in Everything
15 more releases in this issue
· 2026-05-01 → 2026-05-30
Drata adds Microsoft Teams direct messaging as a notification delivery option for Compliance alerts
Supports direct messaging for Notification Rule types: Personnel with Pending Actions, Required Approvals, Control Evidence Updates, and Workflow Updates.
Supports direct messaging for Custom Workflows using the Send Microsoft Teams message action.
Drata adds bulk CSV import for policy acknowledgments in the New Experience, eliminating manual entry and support requests.
Adds Bulk Import flow for Policy Acknowledgments in the New Drata Experience, allowing users to paste data from spreadsheets or upload a CSV directly via the UI.
Drata adds OpenSearchOpenSearchAn open-source search and analytics engine, forked from Elasticsearch by AWS in 2021, that lets cyber tools store, query, and visualize large volumes of log or event data without licensing restrictions.-powered search, Custom Fields visibility/filtering, and configurable columns to the Personnel table.
OpenSearch integration provides near real-time, high-performance search with fuzzy matching across all indexed fields, including Custom Fields.
Custom Fields are now visible, searchable, and filterable directly in the Personnel table.
Configurable columns allow you to show, hide, reorder, resize, and pin columns in the Personnel table.
New AI Answer Customization presets and Content Collections for scoped AIQA runs in Drata
Adds tone, verbosity, language, regional style, and Additional Styling Instructions (up to 1,000 characters) via admin-configurable prompt presets to control AI Answer output.
Adds a Test AI Answer Style preview feature to validate preset output without consuming AI credits.
Introduces Content Collections allowing admins to curate subsets of Trust Library content filtered by type and tags for scoped application per AIQA run.
Adds Questionnaire Details View recording which Content Collection was used for auditability.
Drata allows adding configurable custom fields to framework requirements for metadata capture.
Adds configurable Custom Fields directly to both out-of-the-box and custom framework requirements to capture implementation statements, scores, ratings, justifications, and internal owners.
Enables searching, filtering, and displaying custom fields within the requirements table for any framework scope.
Vanta adds per-risk access management, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools for data reading, and Trust Center AWS Marketplace integration.
Adds ability to delete files from risk tasks by showing file names instead of just a count
Trust Center: AWS Marketplace Integration allows featuring Trust Center on AWS Marketplace listings
2 details in Everything
4 more releases in this issue
· 2026-05-03 → 2026-06-06
Vanta introduces Agent-driven SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. onboarding, native billing, Wiz integration, and sandboxed agent analysis.
Adds a guided Agentic SOCSOCA security operations center, the team or function that monitors threats, investigates alerts and coordinates incident response. Its work can be internal, outsourced or shared. 2 setup flow for startups in the SOC 2 Guide package that generates tailored compliance plans via the Vanta Agent
Adds a new in-app native billing page that replaces the previous Stripe redirect and serves invoices directly from Netsuite
Ingests Wiz configuration findings as SLASLAA formal agreement between a service provider and customer that defines expected uptime, response times, and remedies for failures, giving cyber tools a contractual baseline for availability and support commitments.-trackable security findings for Professional and Enterprise (Modular) users
Enables admins to customize personnel reminder emails using template variables and send them from a verified company domain instead of Vanta's default
Adds bulk edit and delete capabilities with a permanent table view for Privacy Data Inventory items
+2 moreshow less
Allows collaboration with the Vanta Agent to create, update, and delete processing activities in the Privacy Data Inventory with multi-field updates
Supports 10% rollout of Vanta Agent Sandbox to run bash commands, execute Python scripts, and export files for large file/dataset analysis
Vanta adds Knowledge Base API for Answer Library management and several UI-driven compliance features
Adds Knowledge Base API with LIST endpoints allowing programmatic CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. of Answer Library entries
Trust Center admins can now fulfill GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification. Article 17 erasure requests directly from Settings by entering a viewer's email to trigger an automated workflow that anonymizes their PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations.
Users are now immediately notified via email when a monitored vendor experiences a confirmed or suspected security breach, and can view a structured incident detail page showing confirmation status, severity, data breach status, a summary of what happened, source evidence links, and a basic incident timeline all in one place
Users now receive an AI-generated recommendation (Approve, Deny, or Needs Review) for every account at the start of an access review, each surfaced with the signals behind it such as employment status, last login, and prior decisions
Users can map Trust Center tag values directly to Salesforce fields so that when a customer requests access, the right documents are automatically delivered based on their Salesforce data
+7 moreshow less
Users setting up Commitments for the first time are now guided through a four-step onboarding flow with a welcome modal, a persistent progress banner, and Chameleon-powered tours pointing to the exact UI needed at each step
Users can export test data in bulk from the Tests page via CSV, with a configuration modal that gives them control over exactly what gets included in the export
Users on VantaGov now have access to all reports including the Issues Report, powered by the same Snowflake-based reporting data pipeline available in Vanta's commercial product
Users on CMMC Level 2 can track their Supplier Performance Risk System (SPRS) Score directly in Vanta via a new reporting widget that updates as they make progress on controls
Users managing compliance across multiple Business Units can now access a single My Program home page that provides cross-BU and cross-framework visibility into their entire compliance program
Users on NIST 800-53NIST 800-53A catalog of security and privacy controls for U.S. federal information systems, published by NIST. Cyber tools cite it to map their findings or features to a recognized compliance framework., NIST 800-171, FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one. Rev 5, and CMMC frameworks can capture three additional fields per control including control type, implementation status, and implementation details
Users running vendor assessments in TPRMTPRMAssessing and monitoring the security risk an organization takes on through its vendors, suppliers and service providers. It covers the questionnaires, evidence and continuous checks behind letting a third party hold your data. can request access to private documents from Safebase, Secureframe, and Conveyor trust centers directly within an assessment using a computer use agent
Adds the Event Logs API for continuous fetching of Vanta event logs to detect suspicious user behavior and ingest activity into SIEMsSIEMsSecurity Information and Event Management platforms that collect, normalize, and correlate log data across an infrastructure so cyber tools can detect threats and trigger alerts from a central point.
Adds Akamai Domain Protection integration to monitor managed domains, proxy status, and WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server./bot/DDoSDDoSDistributed Denial of Service: an attack that floods a target system with traffic from many sources simultaneously, exhausting its resources so legitimate requests cannot be served. configuration with automated tests
Adds automated Jira ticket creation for Documents (Beta) to automatically create Jira issues when evidence is needed
Adds Issue Snapshots with Audit Integration to take point-in-time snapshots of filtered issues for auditors
Adds support for mapping spreadsheet columns to tag categories during Answer Library imports
Conveyor adds OAuth for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server, fine-grained API key scopes, and programmatic control of subprocessors, questionnaires, and knowledge base.
Adds OAuth 2.1OAuth 2.1A consolidated draft of the OAuth authorization framework that merges OAuth 2.0 with its most important security BCP updates, dropping unsafe flows so tools can delegate user access without handling credentials directly. sign-in support for the Conveyor MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. alongside existing API keys
New POST /api/v2/subprocessors endpoint to programmatically add vendors with fuzzy matching
POST /api/v2/knowledge_base/questions endpoint to create Q&A pairs in the Knowledge Library
Fine-grained permissions allowing API keys scoped to specific resources and actions
Trust Center document viewer now displays associated product lines for SOC 2SOC 2An auditing framework from the American Institute of CPAs that certifies a service organization's controls around security, availability, and data handling, giving buyers assurance that a vendor meets baseline trust criteria. reports and other documents
+1 moreshow less
Redesigned NDA Settings page showing translation status and per-language controls
Conveyor MCP ServerMCP ServerA process that exposes tools, resources, and prompts over Anthropic's Model Context Protocol, letting an AI agent call external APIs or local services through a standardised interface. adds OAuth 2.1OAuth 2.1A consolidated draft of the OAuth authorization framework that merges OAuth 2.0 with its most important security BCP updates, dropping unsafe flows so tools can delegate user access without handling credentials directly. sign-in support for consumer AI client integration.
Adds OAuth 2OAuth 2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs..1 sign-in capability to the Conveyor MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server alongside existing API key authentication.
Conveyor adds PATCH endpoint for questionnaires, enabling headless updates via API or MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. clients.
Adds PATCH method to the questionnaire endpoint allowing updates to status, due date, assignee, and notes fields.
Conveyor adds Public API and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server support for managing Knowledge Library Q&A pairs
Adds POST /api/v2/knowledge_base/questions endpoint to create Q&A pairs programmatically.
Introduces an MCP server for AI clients (Claude Code, OpenAI playground) to run bulk curation prompts against the Knowledge Library.
Conveyor adds API endpoints for KB answer verification and analytics data retrieval
Adds PATCH /api/v2/knowledge_base/questions/:id endpoint to programmatically mark KB answers as verified or unverified
Adds GET /api/v2/questionnaires/questions, GET /api/v2/oneoff_questions, and GET /api/v2/trust_center/conversations endpoints to retrieve questionnaire questions, one-off Q&A data, and Trust Center Agent conversations via API
Adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools knowledge_base_patch_question, analytics_get_questionnaire_questions, analytics_get_oneoff_questions, and analytics_get_trust_center_conversations for use in Claude Code and other MCP-compatible clients
New GET endpoints to pull questionnaire questions, one-off questions, and Trust Center conversations via API
GET /api/v2/questionnaires/questions returns every questionnaire question with ConveyorAI answers, final answers, grading, status, last editor, and cited sources.
GET /api/v2/oneoff_questions returns every question asked through the API, Slack, browser extension, web app, and Trust Center Agent, with answers, confidence levels, sources, and who asked.
GET /api/v2/trust_center/conversations returns full Trust Center Agent conversations with nested messages, visitor emails, and referenced documents.
Adds PATCH /api/v2/knowledge_base/questions/:id to programmatically verify KB answers via API or MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.
Adds PATCH /api/v2/knowledge_base/questions/:id endpoint with status=verified and status=unverified parameters to mark knowledge base answers as verified or unverified via API
Adds knowledge_base_patch_question MCP tool for programmatic KB answer verification in Claude Code and similar clients
New My Organization dashboard for executives, automatic Microsoft 365 integration, Azure DevOps and JumpCloud support, and unshared environment detection.
Adds Minha Organização (My Organization) dashboard consolidating risk scores and compliance history for executives
Enables automatic integration of Microsoft 365 via the organization panel interface
Adds monitoring support for Azure DevOps and JumpCloud Open Directory Platform environments
Introduces auto-detection alerts for unshared relevant environments not explicitly registered
CISO Assistant v3.17.0 adds OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. strict state/nonce mode for tighter authentication security.
└──▷ GET THIS VERSION
$ git clone --branch v3.17.0 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.17.0
Adds oidc.strict_state_nonce configuration option to enforce strict State and Nonce validation in OIDC integrations
1 detail in Everything
6 more releases in this issue
· 2026-05-03 → 2026-05-30
$ git clone --branch v3.16.7 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.16.7
Introduces project management functionality to organize assessment scope
Adds xlsx export format for Analytics data to enable Power BI integration
Enables auditee mode by default via feature flags
Enables advanced analytics by default via feature flags
Allows adding justification when an approver checks the risk acceptance
+1 moreshow less
Supports score scale configuration at the requirement node level
6 details in Everything
└──▷ BREAKING ON UPGRADE
!Upgrades psycopg2 to psycopg3, requiring a database driver migration
Adds framework-driven reporting across domains and analytics to applied controls
└──▷ GET THIS VERSION
$ git clone --branch v3.16.6 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.16.6
feat: framework-driven reporting across domains - New capability to generate reports spanning multiple compliance frameworks simultaneously.
CISO Assistant v3.16.5 adds BIA/follow-up support in Perimeters and NCSC CAF v4.0 framework coverage
└──▷ GET THIS VERSION
$ git clone --branch v3.16.5 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.16.5
Perimeter objects now include Business Impact Assessment (BIA) data and follow-up tracking
Adds support for the NCSC Cyber Assessment Framework (CAF) version 4.0
CISO Assistant v3.16.3 adds RACI/RASCI/RAPID matrix, EBIOS RMEBIOS RMA French risk-management method published by ANSSI for analysing cyber threats and selecting countermeasures; tools use it to structure risk assessments that satisfy French and EU regulatory expectations./Egerie import, AI Defense Matrix, KSA PDPL framework, and Estonian UI.
└──▷ GET THIS VERSION
$ git clone --branch v3.16.3 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.16.3
Adds support for responsibility matrix types RACI, RASCI, and RAPID for task and control ownership mapping.
Supports importing EBIOS RM studies in Egerie format.
Adds the AI Defense Matrix framework to the built-in library.
Adds KSA's PDPL (Personal Data Protection Law) framework to the built-in library.
Adds Estonian language support to the UI.
+4 moreshow less
Adds label support on tasks for categorization and filtering.
Introduces an export modal in the UI to provide context and improve discoverability of export options.
Adds slider inputs for number and single-choice fields in the framework builder.
Adds asset creation wizard, customer questionnaire prefillprefillThe first phase of inference, where the model reads the whole prompt in parallel before producing its first token. It drives time-to-first-token; decode is the token-by-token phase after it. wizard, and folder tree writable permission handling
└──▷ GET THIS VERSION
$ git clone --branch v3.16.2 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.16.2
└──▷ HOW TO FIND IT
Guide users through creating and linking assets via the new UI mode.
📍In the UI, use the new Create Asset wizard to define assets and link them to frameworks.
Automate customer questionnaire data entry using the specialized prefill wizard.
📍In the UI, select the Customer Questionnaire Prefill Wizard to map internal data to external responses.
Adds feat(exp): UI mode to create and link assets for guided asset setup
Adds feat(exp): specialized wizard for customer questionnaire prefill to accelerate compliance responses
Adds feat: add new record consumers and enhance data import commands with detailed help descriptions to clarify available CLI actions
Adds feat: add writable permission handling to folder tree selection to enforce access controls during UI navigation
CISO Assistant v3.16.1 adds Azure Blob Storage support and a new journeys editor with respondent mode for third parties
└──▷ GET THIS VERSION
$ git clone --branch v3.16.1 https://github.com/intuitem/ciso-assistant-community.git
# already have the repo? check out this version:$ git checkout v3.16.1
Adds Azure Blob Storage support as an alternative storage backend to S3.
Introduces the journeys editor for creating assessment workflows.
Enables respondent mode for third-party assessments, including auto-generated questions for respondents.
Runlayer is an MCP gateway that enforces identity-mapped permissions and detects threats across the agents and MCP servers employees use.
Runlayer v1.28.24 adds Identity Forward to all HTTP connectors, web UI .md skill upload, and a new MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. config wizard.
Enable X-Runlayer-* headers or signed JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. Identity Forward on any Streaming HTTP or SSESSEServer-Sent Events, a browser API and HTTP-based protocol where a server pushes a stream of text events to a client over a single long-lived connection, giving tools a lightweight alternative to WebSockets for one-way real-time updates. connector via its configuration
Upload a single .md file as SKILL.md in the web UI to create skills with auto-derived names
Install full event/session hook set by default for MDM deployments; toggle enforcement-only with MDM field set to false
Access Settings → MDM Configuration wizard to guide platform selection, detect/enforce mode, and artifact download
4 details in Everything
7 more releases in this issue
· 2026-05-01 → 2026-05-29
Runlayer 1.28.63 adds HITLHITLHuman in the loop, involving a person in an otherwise automated workflow. The person can review, approve, correct or supply information before work continues. notify-only mode, quarterly agent schedules, Slack channel blocklists, and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. export noise reduction
Adds asynchronous HITL Notify-Only approval mode for agents
Allows agent schedules to use :00, :15, :30, and :45 cadences
Adds Slack channel blocklist support in admin settings
MCP export_audit_logs trims verbose internal details by default with an opt-in flag
Runlayer 1.28.23 adds webhook API-key auth, bulk audit log export via MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface., and customer-owned SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. S3 bucket support.
Webhook dialog can now require API-key authentication for agent webhooks
Adds export_audit_logs tool to Runlayer MCP for exporting logs as JSON or CSV
Runlayer Hooks TypeScript SDK supports client_credentialstoken exchangetoken exchangeAn OAuth 2.0 protocol extension (RFC 8693) that lets a service trade one token for another with different scopes, audience, or type, enabling delegation and impersonation across service boundaries without re-authenticating the user. for agent account auth
SIEM export allows writing directly to a customer-owned S3 bucket
Shadow page includes new Skills section with discovery timeline and breakdowns
+4 moreshow less
Agent run timelines now render subagent tool calls and events inline
Claude Opus 4.8 is available as an agent model when Anthropic is configured
Server-level Policies tab renamed to Permissions in the UI
New catalog connectors: AWS MCP, Supernova Relay MCP
Runlayer adds Microsoft Outlook Calendar MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. connector with 11 tools for event CRUDCRUDThe four basic database operations — Create, Read, Update, Delete — used as shorthand for any system that manages persistent data records, giving cyber tools a standard model for interacting with stored information. and availability lookups
Runlayer 1.28.21 adds Mask violation action, self-serve SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. role mapping, and agent cloning.
Adds Mask violation action to Security Scanners to redact detected PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. or credentials while allowing the request to continue
Enables admin-only configuration of SCIM groups-to-roles mapping in Settings → Workspace → Manage Directory Sync for self-serve directory sync
Introduces agent cloning capability via the renamed Clone action, copying configuration, connectors, and tools to a new agent
Runlayer 1.28.20 adds PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. regex detection, Helm CA/bundle config, new MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. tools, and expanded client scanning.
Adds model and icon parameters to the create_agent MCP tool.
Adds is_disabled parameter support to the update_agent MCP tool.
Expands create_server and update_server MCP tools to support all REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. fields including OAuth, audit log sensitivity, and deployment association.
Adds PII pattern-based detection using regex validators for SSN, credit card, phone, email, passport, driver’s license, IBAN, IP address, date of birth, MRN, VIN, Bitcoin address, and Ethereum address.
Allows organization API keys to be scoped with the Deploy role.
+7 moreshow less
Enables mounting a custom trusted CA bundle for outbound HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. in self-hosted Helm deployments.
Adds support for referencing an existing Kubernetes Secret for backend credentials in Helm chart configuration.
Adds ability to configure a read-replica endpoint for offloading read traffic in Helm deployments.
Expands AI Watch detection to discover MCP configs in Cline, Cline CLI, Gemini CLI, Antigravity, and GitHub Copilot CLI.
Runlayer 1.28.19 adds artifact publishing, agent memory toggle via MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface., and shareable session links
Adds publish_artifact tool to agents for sharing workspace files as URLs
Adds enable_memory parameter to create_agent and update_agent MCP tools
Enables shareable direct links for agent run sessions from the sessions list
Runlayer v1.28.18 adds skill risk badges, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. client analytics, Slack DM mode via slack_terminal_run_dm_mode, and refreshed agent templates.
Adds the slack_terminal_run_dm_mode config key to control run-result Slack DMs (always, errors_only, disabled) via the update_agent MCP tool
Introduces a Skill risk assessment widget on the Skills tab with per-skill risk level badges (High, Medium, Low, Minimal, Unknown)
Adds a Plugin usage by client widget to the Plugins tab showing which MCP clients generate the most plugin activity
Replaces agent creation templates with new default patterns: 1:1 Prep, Release Notifier, Account Intelligence, Daily Briefing
microsandbox v0.5.0 adds Go SDK, SSH support, per-mount policies, and live metrics
└──▷ GET THIS VERSION
$ git clone --branch v0.5.0 https://github.com/superradcompany/microsandbox.git
# already have the repo? check out this version:$ git checkout v0.5.0
Adds Go SDK with full API parity and createWithProgress in Node SDK for image pull events
Adds --script and --script-raw CLI flags for ergonomic script execution
Makes ipv4 and ipv6 pools configurable via the net feature
Introduces live metrics via a shared-memory registry (feat(metrics))
Adds per-mount stat-virt and host-perms policies in passthroughfs
+2 moreshow less
feat(ssh): adds sandbox SSH client and server support
Makes OCIOCIOpen Container Initiative standard, maintained by the Linux Foundation, defining the image format and runtime spec that container tools share so images built once run anywhere OCI-compliant. upper size configurable for sandboxes and changes start command to accept variadic arguments
7 details in Everything
└──▷ BREAKING ON UPGRADE
!Drop redundant MSB_PATH reads at python + node sdk layers
!Consolidate network policy flags around --net-default and *.foo.com suffix (CLI refactor)
Enterprise Gateway 2.10.0 adds Claude Platform on AWS, Cato guardrail, multi-dimensional pricing, Prometheus labels, and SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. hardening.
Adds claude-platform-aws provider with accessKey, assumedRole, and serviceRole auth modes for Anthropic’s full-platform capabilities through AWS
Adds Cato Networks guardrail plugin for AI security inspection of LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. prompts and responses via Cato’s analyze API
Adds PROMETHEUS_INCLUDE_CONFIG_NAME_LABEL and PROMETHEUS_INCLUDE_API_KEY_NAME_LABEL environment flags to attach config slug and API key name as labels on custom metrics
default.allowedRequestTypes guardrail now runs as a beforeRequestHook on proxy requests
Adds otel to the plugin manifest allow list to permit OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. export via guardrail config
+3 moreshow less
guard_chat_completions requests to CrowdStrike AIDR now forward user_id, user_name, llm_provider, and model metadata
Vertex AI integration adds support for the zai-org model provider on chat completions
Forwarding OpenAI-style service_tier as the upstream Vertex header for tiered inference usage attribution
8 details in Everything
13 more releases in this issue
· 2026-05-04 → 2026-05-30
Portkey Frontend 1.9.2 improves self-hosting configuration via a new environment variable and reorganizes default workspace API key settings to the organisation level.
Adds VITE_PRESELECT_LOGIN_PERMISSION environment variable to pre-select the login permission checkbox on private deployments
Enterprise Gateway 2.9.0 adds default/drop params, new providers, Lakera guardrails, and native Azure Responses API
Adds default_params and drop_params config fields to Config Targets for conditional injection and removal of request parameters by dot-notation path.
Integrates Fal AI provider (fal-ai) for image, video, and audio generation models.
Integrates BytePlus provider (byteplus) for chat completions.
Integrates Scenario AI provider (scenario-ai) with proxy passthrough support for Basic auth using apiKey and optional scenarioApiSecret.
Adds Lakera Guard as a guardrails partner via /v2/guard API, supporting beforeRequestHook/afterRequestHook, PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. redaction, and optional project_id/apiBase.
+4 moreshow less
Enables per-region Vertex AI endpoints for batches, Gemini EmbeddingEmbeddingLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG. 2 embeddingsembeddingsLists of numbers a model produces to represent the meaning of text, images or code, so similar items sit close together. They power semantic search and RAG., Anthropic Claude on Vertex, and Gemini models.
Adds support for Anthropic Claude models via the unified /v1/batches API on Vertex AI.
Unlocks Azure AI Foundry native Responses API (/v1/responses) behind a flag for agent references and transformations.
Supports OpenAI-style service_tier parameter in Amazon Bedrock provider requests with correct usage attribution.
Frontend 1.9.1 adds Azure Workload Identity configuration via dashboard and improves API key rotation UX.
Adds azureWorkloadClientId and azureWorkloadTenantId config fields in the dashboard to enable Azure Workload Identity for OpenAI and AI Foundry integrations
Improves input field and validation error messaging for Org service API key rotation
Portkey Backend 1.16.2 adds Lakera Guard support, workspace API key defaults, batch API key lookup, and SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly. hardening.
Adds Lakera Guard integration via /v2/guard endpoint for prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools., policy violation, and PIIPIIPersonally Identifiable Information — data that can identify a specific individual, such as names, email addresses, or SSNs. Cyber tools flag or redact it to limit exposure and meet privacy regulations. detection with projectID, endInclusive, and timeout config options
Adds fal.ai provider to the Model Catalog under the fal-ai identifier for OpenAI-compatible inference across LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code., image, video, and audio models
Allows setting defaults.user_api_key_config via PUT /v2/workspaces/:id to define a default config slug for auto-created or fallback workspace-user API keys, with validation preventing deletion of the active default
Extends isValidCustomHost validation across organisation settings, deployments, providers, virtual keys, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. integrations, integration-model custom_host, and SAMLSAMLA standard for passing signed identity assertions between a sign-in provider and an application. It lets a user sign in through their organization's identity provider. ACS URLs to block private/reserved IPs, metadata endpoints, non-HTTP(S) schemes, URL fragments, and other unsafe targets
Enables hardening of OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user.PKCEPKCEProof Key for Code Exchange, an OAuth safeguard that binds an authorization code to the client that requested it. An intercepted code cannot be redeemed without the client's matching verifier. flows for SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. authentication and ensures JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. user attribution correctly resolves user email and enforces workspace membership
+2 moreshow less
Adds ids query parameter support to GET /v2/api-keys for batch lookup via comma-separated UUIDsUUIDsA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide.
Validates byteplus_region in the integrations API for the BytePlus provider integration
Portkey Enterprise Gateway 2.8.0 adds Tavily guardrails, MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.CORSCORSA browser mechanism that lets a server declare which foreign origins may read its HTTP responses, enforced by the browser to block unauthorized cross-site requests from JavaScript. controls, Azure Workload Identity, and Vertex AI TTS support.
Adds Tavily Online Guardrail Plugin for web-grounded checks in guardrail pipelines
Enables Vertex AI Gemini TTS via unified speech APIs (createSpeech / generateSpeech) through gateway routes
Updates Bedrock Mantle prompt cache pricing to include 1-hour cached context cost path
Extends Workload Identity support for Azure OpenAI, Azure AI Foundry routes and adds it as an authentication option for Azure Cache for Redis
Introduces a new usage limit policy type for finer-grained consumption control
+4 moreshow less
Adds environment flags to tune CORS response headers for MCP endpoints in self-hosted deployments
Extends Prompt Security checks with additional coverage and provider-specific configuration hooks
Refreshes Beta header forwarding and filtering across providers
Supports provider slug references for circuit breaker target resolution
Portkey 1.16.1 adds SSRFSSRFServer-side request forgery, an attack that tricks a server into making requests chosen by an attacker. Those requests can reach internal services the attacker cannot access directly.-hardened Agent Gateway fetching, batches output file ID support, and service-to-service config auth
POST /v2/agent-integrations/fetch-agent-card now validates upstream endpoints against SSRF vectors (private IPs, cloud metadata, non-HTTP(S), fragments) and enforces valid JSON {url, name} responses under 1 MB
Agent card discovery is restricted to /.well-known/agent-card.json and /.well-known/agent.json, removing the previous fallback to the raw base endpoint
PUT /v2/batches/:id now accepts internal_output_file_id for the guardrails-on-batches pipeline, supported by a new internal column on batches records
GET /v2/configs now supports data-service token authentication for service-to-service configuration reads
Portkey Backend 1.16.0 adds Tavily guardrail, Azure Workload Identity, requests usage-limit policy type, and configurable API key rotation.
Adds Tavily Online Search guardrail with configurable search parameters to inject web results into prompts
Adds workload auth mode for Azure OpenAI and Azure AI Foundry integrations requiring azure_workload_client_id and azure_workload_tenant_id
Adds entraFederated auth mode for Azure AI Foundry integrations
Adds requests as a new usage-limits policy type alongside cost and tokens
Allows PUT /v2/policies/usage-limits/:id and PUT /v2/policies/rate-limits/:id to accept conditions in the request body
+3 moreshow less
Adds rotation_period_days (1–365) to API key rotation policies alongside existing rotation_period
Honours NO_PROXY environment variable for outbound LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code., OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user., and Mailgun calls
Adds REQUEST_TIMEOUT config for outbound fetch timeout in milliseconds
8 details in Everything
└──▷ BREAKING ON UPGRADE
!GET /v1/auth/self now requires a session/JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. and rejects requests authenticated only with an API key
!Legacy endpoints /users/firebase-custom-token and /utils/oidc-client-id have been removed
Portkey Data Service adds Azure Blob Storage backend and FIPSFIPSA set of US federal standards published by NIST that define approved cryptographic algorithms and modules; cyber tools use it to meet compliance requirements in government and regulated environments.-compliant Dockerfile variant in v1.7.1
Adds Azure Blob Storage as a log-export storage backend alongside existing S3 options.
Adds FIPS-compliant Dockerfile variant for data-service with FIPS mode enabled and SHA-256SHA-256A cryptographic hash function that turns data into a fixed 256-bit fingerprint. It is used to check integrity; hashing does not encrypt the original data. signing.
Portkey Backend v1.15 adds auto-generated API keys, custom key rotation, passthrough configs, and granular agent RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists..
Adds user_api_key_auto_create organization setting to automatically provision default workspace-user API keys on member join or invite acceptance
Adds user_api_key_rotation_period organization setting to enforce automatic API key rotation for workspace-user keys
Adds rotation_period_days column to rotation_policies and exposes periodic_reset_days, next_usage_reset_at, and last_reset_at fields on usage limit policies
Adds API_KEY_PREFIX environment variable to prefix all newly-generated Portkey API keys in self-hosted deployments
Adds pricing_adjustments.multiplier config to integrations for per-token markup/discount multipliers
+13 moreshow less
Allows setting models[].configurations.custom_host per integration model via PUT /integrations/:id/integration-models
Supports value_format: json in secret_mappings to parse stringified JSON values
Adds support for secret_mappings on MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. integrations with resolution at request time
Adds azure_auth_mode: entraFederated mode for Azure OpenAI integrations, requiring azure_entra_tenant_id and azure_entra_client_id without a client secret
Seeds new bedrock-mantle provider for AWS's OpenAI-compatible Bedrock inference engine
Adds allow_subdomains flag to SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. settings to resolve users from subdomains of an allowed root domain
Extends POST /v1/scim/workspaces to accept scim_group_name in addition to scim_group_id
Adds organisationAdminsViewLogs and organisationAdminsViewLogMetadata organization settings to control org admin access to request logs and metadata
Allows configs to set passthrough: true to mark requests as passthrough mode without provider transformation
Releases the full ongrid-v0.7.158-linux-amd64.tar.gz self-hostable stack including manager, frontier, and web images with nginx, Prometheus, Grafana, Loki, Tempo, and qdrant configs.
Adds install.sh, upgrade.sh, and uninstall.sh scripts to the package for stack lifecycle management.
CalypsoAI tests AI systems for security, safety, and compliance risks before deployment.
Adds OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. and AWS auth for model connections; admin default role; in-progress campaign report links
Adds OAuth 2.0 and AWS authentication options for model connections via Configure > Connections > Other models > Authentication
Allows admins to set the default role for new users by hovering over a role in the UI and selecting Set as default
In-progress AI Red Team campaigns now link directly to their reports under Red Team > Reports
3 details in Everything
1 more release in this issue
· 2026-05-01 → 2026-05-21
Giskard tests and evaluates LLM applications for performance, bias, and security issues.
Giskard v1.0.0b3 adds OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against. LLM01 indirect injection checks and trace type inference via parameter annotations.
└──▷ GET THIS VERSION
$ git clone --branch giskard-llm/v1.0.0b3 https://github.com/Giskard-AI/giskard-oss.git
# already have the repo? check out this version:$ git checkout giskard-llm/v1.0.0b3
Adds minimal OWASP LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. suite generator covering LLM01 indirect injection
Enables checks to infer trace type from the target second parameter annotation
Adds --websocket support for agent providers in AI-Infra-Guard v4.1.10
└──▷ GET THIS VERSION
$ git clone --branch v4.1.10 https://github.com/Tencent/AI-Infra-Guard.git
# already have the repo? check out this version:$ git checkout v4.1.10
Supports WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. agent providers, enabling connections to inference endpoints that communicate over the WebSocket protocol.
1 detail in Everything
1 more release in this issue
· 2026-05-21 → 2026-05-28
nono v0.58.0 adds JSONC profile support, per-profile target binary, Bitwarden credential source, session lifecycle hooks, and a java-dev profile.
└──▷ GET THIS VERSION
$ git clone --branch v0.58.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.58.0
└──▷ TRY IT
Use JSONC so you can annotate policy decisions directly in a profile file with inline comments.
$ # myapp.jsonc
{
// Allow outbound HTTPS to internal API only
"allow": ["net:api.internal:443"]
}
Supports JSONC (JSON with comments) syntax in profile files for easier annotation of policy configs.
Allows profiles to specify a target binary directly, scoping a profile to a particular executable.
Adds Bitwarden credential source via the bw:// URI scheme for secret resolution.
Introduces session lifecycle hooks to run commands or scripts at session start and end.
Adds a java_runtime policy group and a java-dev built-in profile for sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls. Java workloads.
nono v0.55.0 adds AF_UNIX socket sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls., Landlock v6 support, and profile signer verification.
└──▷ GET THIS VERSION
$ git clone --branch v0.55.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.55.0
Adds Landlock v6 signal support and abstract Unix socket scoping on Linux.
Adds recursive Unix socket directory grants via the CLI.
Adds an explicit allowlist for pathname AF_UNIX sockets in the sandbox.
Implements AF_UNIX pathname mediation on Linux for fine-grained socket access control.
Verifies pack signer identities when pulling profiles and supports org/repo pull format.
+1 moreshow less
On macOS, treats open_port 0 as a wildcard grant for all localhost outbound connections.
$ git clone --branch v0.47.0 https://github.com/nolabs-ai/nono.git
# already have the repo? check out this version:$ git checkout v0.47.0
└──▷ BREAKING ON UPGRADE
!The profile JSON schema has been restructured (feat(profile)!): existing tooling or scripts that parse or produce profile JSON will need to be updated to match the new schema shape.
Ai-Safe2-Framework provides governance, risk, and compliance controls for securing agentic AI systems and non-human identities.
Hermes Sovereign Runtime v1.0 introduces a production-grade deployment package for NousResearch/hermes-agent enforcing AI SAFE² v3.0 controls.
└──▷ GET THIS VERSION
$ git clone --branch 2026-05-30_Hermes_Sovereign_Runtime https://github.com/CyberStrategyInstitute/ai-safe2-framework.git
# already have the repo? check out this version:$ git checkout 2026-05-30_Hermes_Sovereign_Runtime
2 more releases in this issue
· 2026-05-01 → 2026-05-30
v2 of ai-safe2-framework reworks Codex sovereign runtime with wrapper-first deployment and new governance file standard.
└──▷ GET THIS VERSION
$ git clone --branch 2026-05-03-Codex-Sovereign-Runtime-v2 https://github.com/CyberStrategyInstitute/ai-safe2-framework.git
# already have the repo? check out this version:$ git checkout 2026-05-03-Codex-Sovereign-Runtime-v2
Establishes wrapper-first deployment as the default for examples/codex-sovereign-runtime, shifting launch-time enforcement to Codex wrapper and explicit runtime flags instead of global config mutation.
Introduces a minimal core governance file standard consisting of seven new markdown files: IDENTITY.md, SOUL.md, AGENTS.md, USER.md, TOOLS.md, SUBAGENT-POLICY.md, and EVALUATION.md.
Adds MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.-8 through MCP-13 detections, weighted scoring rubric, and a pytest filter for new controls
└──▷ GET THIS VERSION
$ git clone --branch 2026-05-01-MCP-Toolkit-v2.0 https://github.com/CyberStrategyInstitute/ai-safe2-framework.git
# already have the repo? check out this version:$ git checkout 2026-05-01-MCP-Toolkit-v2.0
Adds detection for six new threat classes (MCP-8 session economics, MCP-9 context-tool isolation, MCP-10 multi-agent provenanceprovenanceEvidence recording where a software artifact came from and how it was built, including its source and build process. It helps a consumer check that the artifact matches a trusted build., MCP-11 schema temporal profiling, MCP-12 swarm C2, MCP-13 failure taxonomy) bringing total coverage to 13 controls
Adds a weighted scoring rubric that distributes the 25-point attestation bonus across all 11 attested CP.5.MCP controls based on risk
HackMyAgent v0.22.2 adds scan-soul --explain, SOUL-PROFILE-MISMATCH detection, and full tampered-file accumulation in integrity checks.
└──▷ GET THIS VERSION
$ git clone --branch v0.22.2 https://github.com/opena2a-org/hackmyagent.git
# already have the repo? check out this version:$ git checkout v0.22.2
└──▷ TRY IT
Understand why a soul-profile scan flagged an agent by reviewing each of the 9 governance domains in detail.
$ hackmyagent scan-soul --explain
Adds scan-soul --explain subcommand exposing the 9-domain governance model for soul-profile analysis.
Adds HIGH-severity SOUL-PROFILE-MISMATCH finding for profile-filter scope bypass.
Adds AST-CRED-001 credential detection rule, now gated on credential-format substring matching.
Expands checkPackageIntegrity to accumulate all tampered files — reporting total count plus the first 5 paths in lexicographic order — instead of halting on the first failure; output capped at 200 chars.
Adds symlink rejection in loadManifest via lstatSync at every probed manifest location, defending against post-install file-replacement attacks.
+1 moreshow less
Integrates @opena2a/credential-patterns@0.1.0 as a lockstep dependency for credential detection.
Docker Sandboxes v0.31.0 adds clone-mode sandboxingsandboxingRunning code inside a restricted environment that limits what it can access or change. The isolation reduces the impact of mistakes or untrusted code, depending on the sandbox's controls., private registry secrets, and policy filters.
└──▷ GET THIS VERSION
$ git clone --branch v0.31.0 https://github.com/docker/sbx-releases.git
# already have the repo? check out this version:$ git checkout v0.31.0
└──▷ TRY IT
Run a sandbox in clone mode so the agent writes only to an in-container copy, leaving your working tree and .git/ untouched.
$ sbx run claude --clone
Store GHCRGHCRGitHub Container Registry, GitHub's hosted service for storing and distributing OCI-compatible container images, giving cyber tools a versioned, access-controlled image store tied directly to a GitHub repository. pull credentials host-side so sbx run --template and sbx run --kit can pull from a private registry without docker login.
$ sbx secret set --registry ghcr.io
After removing a sandbox, recover a branch from the persisted sandbox refs.
New --clone flag replaces --branch: sandboxes now run against an in-container read-only clone, keeping writes out of your host working tree and .git/
Host source repository is mounted read-only into the sandbox, with a shallow in-container clone; forge remotes (origin, upstream, etc.) are propagated so the agent can git push directly
Sandbox refs are mirrored to refs/sandboxes/<name>/* on the host and persist after the sandbox is removed, enabling branch recovery with git branch
Adds sbx secret set --registry to store container-registry pull credentials for pulling from private registries (GHCR, ACR, ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure., Quay, etc.) without docker login
Manage registry credentials with sbx secret ls and remove them with sbx secret rm --registry <host>
+6 moreshow less
sbx create now auto-starts the daemon when it isn't running
Opt a sandbox into virtiofs caching at create time via DOCKER_SANDBOXES_ENABLE_VIRTIOFS_CACHE=1; the setting is persisted in the spec across daemon restarts
Policy and rule names are now shown in CLI list output and TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency. details
Adds filters to the policies listing
Verbose error reporting for kit apply failures
Allows public-CA CRLCRLA Certificate Revocation List is a signed file, published by a certificate authority, listing certificates it has revoked before expiry so that clients can reject compromised or mis-issued credentials without contacting the CA live./OCSPOCSPA protocol for checking whether a TLS certificate has been revoked, defined in RFC 6960, letting clients query a CA's responder in real time instead of downloading full CRL lists./AIA endpoints in the balanced proxy preset
11 details in Everything
└──▷ BREAKING ON UPGRADE
!The --branch flag has been removed; using --branch now fails with an error. Replace all uses of --branch with --clone.
!The balanced proxy preset change (allowing public-CA CRL/OCSP/AIA endpoints) applies only to new installations or after running sbx policy reset, which removes any user-added rules.
2 more releases in this issue
· 2026-05-13 → 2026-05-28
Docker Sandboxes v0.30.0 adds non-interactive Hub login, configurable auto-stop grace periods, and policy setup before login.
└──▷ GET THIS VERSION
$ git clone --branch v0.30.0 https://github.com/docker/sbx-releases.git
# already have the repo? check out this version:$ git checkout v0.30.0
Adds non-interactive Docker Hub login to support scripted and CI/CD workflows.
Adds configurable grace period before a sandbox auto-stops when the last session exits.
Allows sbx policy setup to run before login, enabling pre-auth governance configuration.
Re-runs commands.startup on every container start, making init hooks idempotent across restarts.
Adds per-kit memory files for progressive disclosure of kit context to AI agents.
+4 moreshow less
Enumerates installed kits in the AI memory file's Kits section.
Migrates /reset endpoint to /daemon/reset with state-dir wipe now handled daemon-side.
Binds both loopback stacks (IPv4 and IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only.) by default when publishing ports.
Allows raw TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. to host.docker.internal when localhost is permitted in policy.
9 details in Everything
└──▷ BREAKING ON UPGRADE
!The /reset endpoint is replaced by /daemon/reset; any script or tooling calling /reset directly will need to be updated.
Docker Sandboxes v0.29.0 adds per-sandbox network policies, daemon-assigned UUIDsUUIDsA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide., and a confirmation gate on sbx rm.
└──▷ GET THIS VERSION
$ git clone --branch v0.29.0 https://github.com/docker/sbx-releases.git
# already have the repo? check out this version:$ git checkout v0.29.0
└──▷ TRY IT
Remove a named sandbox interactively — the new confirmation prompt stops accidental deletion in scripts without -y.
$ sbx rm my-sandbox
Supports per-sandbox scoped network policies for fine-grained egress control per sandbox instance.
Adds deniedDomains field to network kit policy to explicitly block specific domains.
Allows binary TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. protocols (e.g. SSH) through domain allow rules in network policy.
Adds daemon-assigned UUIDs to sandbox runtimes for reliable identification across restarts and telemetry.
Enables SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. browser relay for Gemini agent.
+3 moreshow less
Auto-opens browser during OpenAI OAuth flow.
Exposes Claude guidance to Codex sandboxes.
Unhides kit command in help output, making it discoverable via sbx --help.
v0.10.1 adds TLS MITM and IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. dual-stack to NetworkProxy enforcer with configurable sidecar quotas
└──▷ GET THIS VERSION
$ git clone --branch v0.10.1 https://github.com/bytedance/varmor.git
# already have the repo? check out this version:$ git checkout v0.10.1
Adds tls_mitm configuration key for the NetworkProxy enforcer to enable man-in-the-middle inspection of encrypted traffic
Adds ipv6_dual_stack configuration key for the NetworkProxy enforcer to enable simultaneous IPv4 and IPv6 networking
Adds sidecar_resource_quotas configuration section to allow setting CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. and memory limits for the sidecar container
3 details in Everything
└──▷ BREAKING ON UPGRADE
!NetworkProxy configurations are now stored in Secrets instead of ConfigMaps.
h5i v0.1.5 adds Agent-to-AgentAgent-to-AgentAgent2Agent, an open protocol started by Google for AI agents from different vendors to discover each other, delegate tasks and exchange results. It complements MCP, which connects an agent to tools. Communication and remote share/migrate commands
└──▷ GET THIS VERSION
$ git clone --branch v0.1.5 https://github.com/h5i-dev/h5i.git
# already have the repo? check out this version:$ git checkout v0.1.5
Adds share setup-remote subcommand to configure remote sharing
Adds migrate-remote subcommand to migrate remote context
Introduces Agent-to-Agent Communication capability
h5i v0.1.4 adds native Alert callouts and Mermaid DAGDAGA directed acyclic graph — a data structure of nodes connected by one-way edges with no cycles — used by tools to model task pipelines or data flows where execution order and dependencies must be enforced without loops. reasoning in PR comments
└──▷ GET THIS VERSION
$ git clone --branch v0.1.4 https://github.com/h5i-dev/h5i.git
# already have the repo? check out this version:$ git checkout v0.1.4
h5i PR comment view now renders native Alert callouts for actionable feedback.
Mermaid reasoning DAG rendering enabled in h5i pull request comments.
ToolHive v0.28.0 adds TOOLHIVE_SKIP_UPDATE_CHECK, RFC 7523RFC 7523An IETF standard that defines how a JSON Web Token (JWT) can be used as a credential to request an OAuth 2.0 access token, letting a cyber tool authenticate to an API without exchanging a username and password at runtime.JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. auth, registry refresh API, and GitHub Copilot CLI support
└──▷ GET THIS VERSION
$ git clone --branch v0.28.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.28.0
Adds TOOLHIVE_SKIP_UPDATE_CHECK environment variable to disable update checks
Adds RFC 7523 JWT Bearer grant package support
Adds identityFromToken field to MCPExternalAuthConfig CRDCRDA Kubernetes extension that adds a new object type to the cluster, so a tool's configuration is stored, validated and versioned by Kubernetes itself rather than in a file beside it.
Adds API endpoint to refresh the registry cache
Adds GitHub Copilot CLI as a supported MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. client
5 details in Everything
3 more releases in this issue
· 2026-05-07 → 2026-05-19
ToolHive v0.27.2 adds forward of MCPServerEntry header in vMCP traffic and OTELOTELAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. config support for API-created workloads.
└──▷ GET THIS VERSION
$ git clone --branch v0.27.2 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.27.2
Forward MCPServerEntry header to vMCP outbound requests
Apply OTEL configuration to workloads created via the API
Adds --client flag for LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. setup, DCR credential store with Redis/Redis ClusterRedis ClusterA distributed mode of Redis, the open-source in-memory data store, that automatically shards data across multiple nodes and keeps it available if some nodes fail, giving cyber tools low-latency shared state at scale. support, Envoy AI Gateway path prefix flag, and Gemini CLI .env injection.
└──▷ GET THIS VERSION
$ git clone --branch v0.27.0 https://github.com/stacklok/toolhive.git
# already have the repo? check out this version:$ git checkout v0.27.0
└──▷ USE IT
Specify a custom OAuth client when setting up the LLM gateway from the CLI.
shell
thv llm setup --client my-custom-client-id
Configure an Envoy AI Gateway to prepend a specific path prefix for Anthropic API calls.
shell
thv run --ai-gateway-envoy --anthropic-path-prefix /api/v1/anthropic
thv llm setup and thv llm teardown now accept the --client flag to specify the OAuth client
Support for CIMDCIMDA text-based Short Message Service protocol from Nokia for exchanging SMS messages between applications and SMS centers, used to build tools that send, receive, or test carrier messaging flows. (Confidential Client ID) as the preferred OAuth client registration method in thv run
Auth server storage now supports standalone Redis and Redis Cluster mode via a new DCR credential store and resolver
Adds --anthropic-path-prefix flag to control path routing for the Envoy AI Gateway integration
Automatic injection of Gemini CLI .env file during LLM gateway proxy setup
OpenShell v0.0.51 adds Docker provisioning progress events, configurable sandbox nproc limits, and handler-level gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. auth enforcement.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.51 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.51
Adds provisioning progress events for Docker sandboxes, giving visibility into container startup.
Declares gRPC authentication mode, scope, and role at the handler level and enforces them at the router.
OpenShell v0.0.44 adds JSON/YAML sandbox listing, mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with. for Podman, nftables network policy, cert generation, and credential refresh foundation.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.44 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.44
└──▷ TRY IT
Generate gateway TLS certificates during RPM-based deployment instead of running the old init-pki.sh script.
$ openshell-gateway generate-certs
Adds -o json and -o yaml output format flags to sandbox list for machine-readable sandbox enumeration.
Introduces openshell-gateway generate-certs command, replacing the previous init-pki.sh script for certificate generation in RPM deployments.
Enables mTLS support for the Podman compute driver, securing compute node communication.
Replaces iptables with nftables for sandbox network policy enforcement.
Injects DENO_CERT into the sandbox child environment, enabling custom CA trust for Deno-based sandboxes.
+2 moreshow less
Adds resource version compare-and-swap (CAS) support to the database layer.
Introduces credential refresh foundation for providers, enabling automated credential rotation.
OpenShell v0.0.43 adds OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. auth, mTLSmTLSMutual TLS, an encrypted connection where both client and server present certificates to prove their identity. It helps services verify who they are communicating with./HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. separation, interactive TTY streaming, TOML config, and ext4 sandbox disks.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.43 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.43
Separates HTTPS from mTLS authentication on the server, enabling independent configuration of each transport security mode.
Adds OIDC authentication support to the TUITUIA text-based user interface that runs inside a terminal, using characters and ANSI escape codes to render menus, panes, and widgets without a graphical desktop, letting cyber tools ship rich interactivity with no GUI dependency., allowing users to authenticate via identity providersidentity providersA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. from the terminal interface.
Adds bidirectional streaming for interactive TTY sessions in exec, enabling real interactive shell workflows.
Introduces a TOML configuration file for the gateway (RFC 0003), replacing or supplementing prior configuration methods.
Supports booting sandboxes from ext4 root disks in the VM layer, enabling persistent or custom disk-backed sandbox environments.
OpenShell v0.0.42 adds Podman socket fallback and drops the SSH handshake secret.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.42 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.42
Falls back to Podman socket automatically when Docker is unavailable, broadening container runtime support.
1 detail in Everything
└──▷ BREAKING ON UPGRADE
!The SSH handshake secret has been dropped (refactor!(auth): drop SSH handshake secret); any configuration or tooling that supplies or validates this secret will break on upgrade.
OpenShell v0.0.41 adds agent-driven policy management, sandbox resource flags, and custom CA support for OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. TLS.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.41 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.41
Adds agent-driven policy management, enabling the agent to participate in policy enforcement decisions.
Adds sandbox resource flags to the CLI for controlling resource allocation when creating sandboxes.
Supports custom CA certificates for OIDC issuer TLS verification in Helm deployments.
OpenShell v0.0.39 adds GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. device-ID awareness in Docker/Podman, Kubernetes ImageVolumeSource sideload support, and TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. relay forwarding.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.39 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.39
Honors GPU device IDs in Docker and Podman container runtimes, enabling precise GPU assignment within containerized workloads.
Supports ImageVolumeSource for Kubernetes supervisor sideload, broadening how supervisor images can be delivered in k8s environments.
Adds TCP route forwarding via ForwardTcp in the relay layer, enabling new network-tunneling use cases.
OpenShell v0.0.37 adds pluggable compute drivers (Docker, Podman, Kubernetes, MicroVM/QEMUQEMUAn open-source machine emulator and virtualizer that lets software run a guest OS or CPU architecture on a different host, giving cyber tools an isolated, inspectable execution environment without dedicated hardware.), OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user./RBACRBACRole-based access control, where permissions are assigned to roles such as reader or administrator and users receive those roles. It makes access easier to manage than individual permission lists. auth, GraphQL L7 policy inspection, CDI GPUGPUA graphics processing unit, a processor that performs many calculations in parallel. AI workloads use GPUs to speed up model training and inference. sandboxes, Helm chart, and Debian/RPM/Homebrew packaging.
└──▷ GET THIS VERSION
$ git clone --branch v0.0.37 https://github.com/NVIDIA/OpenShell.git
# already have the repo? check out this version:$ git checkout v0.0.37
└──▷ TRY IT
Install v0.0.37 fresh (or after destroying the old gateway) to get the new system-service-managed gateway with pluggable drivers.
$ curl -LsSf https://raw.githubusercontent.com/NVIDIA/OpenShell/main/install.sh | OPENSHELL_VERSION=v0.0.37 sh
Before upgrading from v0.0.36, clean up incompatible gateway state to avoid data loss.
Adds pluggable compute drivers for Docker, Podman, Kubernetes, and experimental MicroVM-backed sandboxes (RFC-0001 implementation).
Adds QEMU VM driver with GPU pass-through support for MicroVM sandboxes.
Adds OIDC/Keycloak authentication with RBAC and scope-based permissions for gateway access control.
Adds CDI GPU sandboxes via the Docker compute driver.
Adds Prometheus metrics infrastructure with gRPCgRPCAn open-source remote procedure call framework from Google that uses HTTP/2 and Protocol Buffers to let services call each other's functions across a network, giving tools low-latency, strongly typed inter-process communication. and HTTP request metrics.
+8 moreshow less
Adds auto-detection of compute driver at gateway startup.
Adds initial provider profiles and sandbox-provider attach lifecycle.
Introduces an experimental Helm chart for Kubernetes and OpenShift deployments.
Adds Debian package publishing; expands RPM and Homebrew packaging.
Adopts Kubernetes-style object metadata and labels as the shared entity schema for sandboxes, providers, SSH sessions, and policies.
Adds TTY support for exec in the VM driver.
Adds guest rootfs derived from sandbox images in the VM driver.
Gateway service is now managed as a system service via the package manager instead of CLI commands.
13 details in Everything
└──▷ BREAKING ON UPGRADE
!The openshell gateway start|stop|destroy commands no longer exist; existing gateway state from v0.0.36 or earlier is incompatible and must be destroyed before upgrading.
!Public protobuf shapes for core resources (sandboxes, providers, SSH sessions) have changed; existing clients and gateway instances must be recreated.
!Policy and draft policy recommendations are now stored in the unified objects table instead of dedicated policy tables; policies must be reconfigured after upgrade.
!Gateway persistence now uses a shared entity schema with Kubernetes-style metadata and labels, replacing the previous schema; existing gateway state is not forward-compatible.
Backslash detects and prioritizes reachable vulnerabilities in cloud-native application code and dependencies.
Backslash introduces endpoint monitoring for new MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. stateless protocol attack surfacesattack surfacesThe exposed systems, interfaces and access points an attacker could try to use. It includes internet-facing services as well as identities, software and other reachable resources..
Adds visibility into browser_id and other handle strings passed in conversation context to detect potential hijacking.
Mend AI 18-May-2026 adds Guardrails Docker deployment, Langflow integration, and implicit prompt detection.
└──▷ TRY IT
Deploy the standalone Guardrails server via Docker to secure any environment.
$ docker run -p 8080:8080 mend/guardrails-server
Guardrails can now be deployed as a standalone API server with Docker, extending protection beyond in-app SDK integrations to any environment or language.
The Guardrails SDK adds Langflow integration for agentic workflow security.
Enhanced Harmful Content detection for implicit prompts is now available in the Guardrails SDK.
Mend AI’s AI Agents Configuration Risk feature leaves open beta and becomes generally available.
4 details in Everything
2 more releases in this issue
· 2026-05-04 → 2026-05-18
Mend AI adds red-teaming probes, compliance mapping, and a standalone mend ai scan CLI command
Adds new adversarial testing capabilities including age-restricted goods, dangerous content, cross-session leaks, unverifiable claims tests, hexadecimal/Morse/emoji encoding strategies, and multi-turn escalation.
Introduces automatic mapping of red-team results to OWASPOWASPA nonprofit foundation that publishes open standards, guides, and ranked vulnerability lists—most famously the OWASP Top 10—giving cyber tools a vendor-neutral benchmark to test or report against., NIST, MITREMITREA US federally funded research and development center that maintains public frameworks—ATT&CK, CVE, D3FEND—that cyber tools use to classify threats, vulnerabilities, and defensive techniques in a common language., EU AI ActEU AI ActEU regulation that classifies AI systems by risk level and imposes compliance obligations—documentation, transparency, human oversight—on developers and deployers, shaping how AI-based cyber tools are built and sold in Europe., ISOISOA widely adopted international standards body that publishes technical specifications; cyber tools cite ISO standards to signal compliance with recognized benchmarks for quality, security, or interoperability./IEC, GDPRGDPREU regulation enacted in 2018 that governs how organizations collect, store, and process personal data of EU residents, giving cyber tools legal obligations around data handling and breach notification., and DoD AI Ethics frameworks with configurable compliance thresholds.
Adds the mend ai scan command to enable AI scanning separately from SCASCASoftware composition analysis, identifying third-party dependencies and checking them for known vulnerabilities and license issues. It covers software a team uses rather than writes itself. via the Mend CLI.
Mend AI (04-May-2026): Runtime Protection open beta, streaming red teaming, custom parsers, and multi-language support
└──▷ HOW TO FIND IT
Use custom parsers to test proprietary apps that standard tools don't support.
📍In Red Teaming, navigate to the Custom Parsers section and upload your parser logic for supported proprietary applications.
Configure the HTTP connector to distinguish between successful responses and errors based on status codes.
📍In the Application Red Teaming settings, open the HTTP connector configuration and enable Application status code filtering to define valid vs. error response codes.
Mend AI Runtime Protection enters Open Beta as an in-app guardrails solution for real-time protection against prompt injectionprompt injectionAn attack where text the model reads, such as a web page, file or tool result, carries instructions that override the user's. It is the main security risk for agents with tools., jailbreak attempts, sensitive data exposure, and harmful content.
Red Teaming gains AI model/application streaming support and predefined templates tailored for specific hosting vendors.
Users can now add custom parsers to support proprietary applications in Red Teaming.
Red Teaming adds multi-language support enabling application simulations in different languages.
Application status code filtering is now available in the HTTP connector, allowing definition of valid versus error responses.
Zenity discovers, secures and governs enterprise AI agents from buildtime to runtime across SaaS, endpoint and cloud.
Zenity integrates with AWS Security Hub Extended to unify AI agent findings into the OCSFOCSFAn open schema standard, maintained by the OCSF community under CISA and industry backing, that defines a common event format so cyber tools can share and ingest log data without per-source normalization work.-based risk correlation engine.
AI agent posture violations, runtime anomalies, and detected threats appear in AWS Security Hub Extended via Open Cybersecurity Schema Framework (OCSF)
sponsio v0.1.0 adds daemon IPCIPCInter-process communication, ways for separate programs to exchange data or signals. Examples include pipes, sockets and shared memory. and plugin append command for self-modify protection
└──▷ GET THIS VERSION
$ git clone --branch v0.1.0 https://github.com/sponsiolabs/sponsio.git
# already have the repo? check out this version:$ git checkout v0.1.0
sponsio.daemon module provides a Unix-socket IPC server and client with handlers to enable privileged-process self-modify protection.
sponsio plugin append subcommand allows structurally-additive merging from a staging YAML into a host bucket library as the write path for the self-modify pack.
Maintenance workflow now supports overriding bundled rules via customized: {match: {source: "library:tier1.self-modify"}, disabled: true} config.
IORails adds streaming, OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor., and speculative generation; LangChain becomes optional with NEMOGUARDRAILS_LLM_FRAMEWORK.
└──▷ GET THIS VERSION
$ git clone --branch v0.22.0 https://github.com/NVIDIA-NeMo/Guardrails.git
# already have the repo? check out this version:$ git checkout v0.22.0
└──▷ TRY IT
Opt out of telemetry by setting the environment variable in a shell or Dockerfile.
$ export NEMO_GUARDRAILS_NO_USAGE_STATS=1
Use LangChain as the LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. framework by setting the environment variable at runtime.
$ export NEMOGUARDRAILS_LLM_FRAMEWORK=langchain
Access the new testing utilities directly in Python code.
python
from nemoguardrails.testing import *
# Use available test helpers here
NEMO_GUARDRAILS_NO_USAGE_STATS environment variable to disable anonymous telemetry collection
.config/nemoguardrails/do_not_track file to opt out of usage reporting without setting an environment variable
NEMOGUARDRAILS_LLM_FRAMEWORK=langchain environment variable to re-enable LangChain when using non-OpenAI providers
nemoguardrails.testing public testing surface for library-level test utilities
Speculative generation in IORails that runs input rails in parallel with the main LLM response to hide latency
+2 moreshow less
IORails streaming output rail support for real-time guardrail evaluation on LLM outputs
IORails OpenTelemetry tracing and token-level metrics integration
7 details in Everything
└──▷ BREAKING ON UPGRADE
!LangChain and LangChain-providers are removed from core dependencies; they must be installed separately when NEMOGUARDRAILS_LLM_FRAMEWORK=langchain is set
!AsyncWorkQueue is moved from the Guardrails module to IORails, breaking existing imports from the previous location
pipelock v2.6 adds request_policy operation-rails engine, new Herms modes, and invisible Unicode detection
└──▷ GET THIS VERSION
$ git clone --branch v2.6.0 https://github.com/luckypipewrench/pipelock.git
# already have the repo? check out this version:$ git checkout v2.6.0
Adds operation-rails config engine for request_policy with JSON discriminator rules and WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. per-frame policy support
Adds --mode mcp-only flag to Hermes to run with a shared mcpwrap engine without full suite
Enables reverse_proxy.profile: submit with trusted_upstream configuration for proxy listeners
Adds dns.host_overrides config key for hostname routing overrides in DNS module
Introduces request_policy_deny reason and UUIDv7 receipt ID acceptance in blockreason module
+1 moreshow less
Enables invisible Unicode/BIDI injection detection in files via the scanner
Identity verification (IDV) via live selfie and ID upload becomes mandatory for MBB report submission.
Requires Identity Verification (IDV) via live selfie capture and valid government-issued ID upload for all researchers before submitting reports to Managed Bug Bounty programs.
Adds Identity Verification tab under Account Settings to allow users to complete or check their IDV status.
2 details in Everything
1 more release in this issue
· 2026-05-04 → 2026-05-18
SysReptor 2026.29 adds configurable SSOSSOSingle sign-on, using one identity provider to sign in to multiple applications. It reduces separate passwords and centralizes account and access management. user identifiers, email-verified enforcement, and markdown autolink highlighting.
└──▷ GET THIS VERSION
$ git clone --branch 2026.29 https://github.com/Syslifters/sysreptor.git
# already have the repo? check out this version:$ git checkout 2026.29
└──▷ USE IT
Enforce email verification and set a custom user identifier claim when configuring a generic OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. provider.
Adds configurable user identifier claim for OIDC SSO, letting admins control which claim maps to the SysReptor user identity.
New require_email_verified setting for OIDC config enforces that only users with a verified email can authenticate via SSO.
Migrates Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. and Google SSO settings to the unified OIDC_AUTHLIB_OAUTH_CLIENTS configuration key.
Adds warnings when project user fields reference non-members, surfacing misconfigured assignments during report editing.
Markdown editor now syntax-highlights autolinks for improved readability.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!Entra ID and Google SSO settings are migrated to OIDC_AUTHLIB_OAUTH_CLIENTS; existing configurations using the old provider-specific settings will break and must be updated.
Joplin v3.7.1 adds post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. TLS and whiteboard support
Add support for post-quantum cryptographypost-quantum cryptographyCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. (PQS) TLS
Add support for whiteboards
2 details in Everything
1 more release in this issue
· 2026-05-08 → 2026-05-11
goshs v2.0.9 adds FTP and SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. server modes with public-key auth support
└──▷ GET THIS VERSION
$ git clone --branch v2.0.9 https://github.com/patrickhener/goshs.git
# already have the repo? check out this version:$ git checkout v2.0.9
└──▷ TRY IT
Serve files over SFTP with public-key auth — useful when you need encrypted file transfer without exposing HTTP.
Adds installation support for Arch (AUR), openSUSE, Parrot OS, and NixOS.
5 details in Everything
└──▷ BREAKING ON UPGRADE
!The --update flag is broken in v2.0.7 due to renamed release archives (e.g. goshs_v2.0.7_linux_x86_64.tar.gz); use go install goshs.de/goshs/v2@latest or manually replace the binary until v2.0.8.
!Windows release archives changed from .tar.gz to .zip; any automation that fetches the Windows release by filename will break.
Cloudflare Realtime WebSocketWebSocketA protocol that upgrades an HTTP connection into a persistent, full-duplex channel, letting a server push data to a client without repeated polling. Cyber tools use it for real-time event streaming and live command output. adapter now auto-reconnects and buffers WebRTCWebRTCA browser-native, open standard for real-time peer-to-peer audio, video, and data exchange without plugins. Cyber tools use it to tunnel traffic or exfiltrate data through connections browsers treat as legitimate. media for brief disconnects.
Adds automatic reconnection logic to the WebSocket adapter in Stream mode (egress), retrying the same endpoint for up to 5 seconds after brief disconnects or restarts.
Enables live-first media buffering during reconnection, using a short bounded backlog for audio and resuming video from the latest available JPEG frame.
Cloudflare One Client for macOS 2026.5.1155.1 adds VNET scoping in device profiles, file-based emergency disconnect, and DNSSECDNSSECA set of DNS extensions, maintained by the IETF, that add cryptographic signatures to DNS records so resolvers can verify responses have not been tampered with in transit. passthrough.
Administrators can now control which virtual networks (VNETs) are available to which users via WARP device profile settings in the Zero Trust dashboard
Added a local-file signal source for Emergency Disconnect. In addition to the existing HTTPSHTTPSHTTP carried over an encrypted TLS connection. It protects traffic in transit and lets a browser verify the server's certificate. polling mechanism, administrators can now configure WARP to monitor for a file on disk; the presence of the file triggers an emergency disconnect even if both Cloudflare and your own infrastructure are unreachable.
The local DNS proxy now supports DNSSEC passthrough. DNSSEC-signed responses are forwarded to the application intact (including DO/AD bits and RRSIG records), so applications that validate DNSSEC locally — including resolvers and the dig/drill tooling — work correctly through the client.
Added a new MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. format for organization-wide settings, including a cleaner way to configure the compliance environment (e.g. FedRAMPFedRAMPA US government program that standardizes cloud security authorization, letting vendors get a single assessment accepted across federal agencies instead of repeating the process for each one.). The previous per-configuration approach still works, but the new format is now recommended.
Client Certificate device-posture checks now support template variables (e.g. ${serial_number}, ${device_uuid}) in the Subject Alternative Name field
The Cloudflare Sandbox SDK now supports sharing internal services via Cloudflare Tunnel. New sandbox.tunnels namespace allows zero-config quick tunnels or persistent named tunnels for container previews.
Adds sandbox.tunnels.get(port) to automatically create a zero-config *.trycloudflare.com quick tunnel from inside a sandbox container
Adds sandbox.tunnels.get(port, { name }) option to create a persistent named Cloudflare Tunnel with a custom CNAMECNAMEA DNS record type that maps one hostname to another as a canonical alias, letting cyber tools track infrastructure by following chains of names to their true origin. hostname
Cloudflare One Client for Windows 2026.5.1155.1 adds mandatory auth, WNET scoping, DNSSECDNSSECA set of DNS extensions, maintained by the IETF, that add cryptographic signatures to DNS records so resolvers can verify responses have not been tampered with in transit. passthrough and emergency disconnect file signals
Adds mandatory authentication to block all Internet traffic until user authenticates
Enables VNET scoping in Zero Trust dashboard device profiles so users only see scoped networks
Supports DNS search suffixes from device profile / network policy for single-label queries
Adds local-file signal source for Emergency Disconnect via a monitored disk file
Introduces new warp-cli debug commands for interactive connection diagnosis
+4 moreshow less
Enables DNSSEC passthrough in the local DNS proxy, forwarding DO/AD bits and RRSIG records
Supports template variables (e.g. ${serial_number}) in Client Certificate device-posture SAN fields
Adds a new MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. format for organization-wide settings, recommending it over per-configuration approach
Restores support for the UseWebView2 registry key (HKLM\SOFTWARE\Cloudflare\CloudflareWARP\UseWebView2) to enforce embedded WebView2 browser for sign-in
Cloudflare Radar PQ checker now detects TLS handshake bugs (Split ClientHello, HRR Failure, Unknown Keyshare) via API
Adds detection of HRR Failure bugs during post-quantumpost-quantumCryptography designed to stay secure against a large quantum computer, which could break today's RSA and elliptic-curve keys. NIST standardized the first algorithms in 2024 as ML-KEM, ML-DSA and SLH-DSA. TLS handshakes in Cloudflare Radar
Adds detection of Unknown Keyshare bugs where servers fail to respond with HelloRetryRequest for unknown key exchange algorithms
Adds tool and prompt aliases for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server portals to rename tools and rewrite descriptions
Adds the ability to rename tools and prompts and rewrite their descriptions directly on the portal without modifying the upstream server.
Adds a Modified label in the tools list to indicate which tools have been customized.
Allows setting aliases at two levels: per portal (takes precedence over server-level) and per server.
RealtimeKit adds selective track recording via POST /recordings/track with user_ids support for per-participant WebM files.
Adds POST https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/<app_id>/recordings/track endpoint to start track recordings for specific participants
Supports user_ids JSON array field in request body to specify which participant audio tracks to record separately as WebM files
New quickAction() method on browser binding lets Workers call Browser Run screenshots, PDFs, and extraction directly.
Adds quickAction() method on the browser binding to invoke Browser Run Quick Actions (screenshots, PDFs, content extraction) directly from a Worker without API tokens
Requires compatibility_date of 2026-03-24 or later in Wrangler config to enable the new browser binding functionality
cloudflared v2026.5.2 adds automated connectivity pre-checks at startup for DNS, UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery./TCPTCPA network protocol that delivers a reliable, ordered stream of bytes between two endpoints. It detects lost data and retransmits it. port 7844, and Management API.
Cloudflare Tunnel cloudflared binary runs native DNS resolution checks for region1.v2.argotunnel.com and region2.v2.argotunnel.com at startup.
Adds outbound transport connectivity verification for UDP (QUICQUICA UDP-based transport protocol standardized by the IETF that bakes in TLS 1.3, multiplexed streams, and connection migration, giving tools low-latency encrypted transport without head-of-line blocking.) and TCP (HTTP/2) on port 7844, plus TCP/443 to api.cloudflare.com, directly in the startup flow.
New CLI output includes actionable remediation hints (e.g., Allow outbound UDP on port 7844) for Fail/Warn states, exiting early on blocking failures instead of looping.
Cloudflare One Client for macOS GA adds MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. refresh CLI and captive portal login.
└──▷ TRY IT
Manually trigger an MDM policy pull from the command line.
$ warp-cli mdm refresh
Adds warp-cli mdm refresh subcommand to immediately refresh MDM configuration
Introduces a new built-in captive portal login experience in the macOS UI
Cloudflare One Client for Windows GA adds new UI, warp-cli mdm refresh, and captive portal login
└──▷ TRY IT
Immediately apply updated MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. policies without waiting for the next scheduled sync or reboot.
$ warp-cli mdm refresh
Adds the first general availability of the new Cloudflare One Client UI for Windows with a cleaner design and right-click context menu.
Adds the warp-cli mdm refresh CLI command to execute an immediate refresh of the Mobile Device Management configuration file.
Cloudflare One Client for Linux GA adds new UI and warp-cli mdm refresh CLI command
warp-cli mdm refresh CLI command to immediately refresh MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. configuration
New Cloudflare One Client UI for Linux with right-click context menu and captive portal login
Official support for RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 9 packages (requires EPEL)
Cloudflare now consistently returns BYPASS cache status for uncacheable responses, separating them from MISS in analytics.
Cache status BYPASS is now returned for all uncacheable responses (e.g., exceeding max file size, Cache-Control: no-cache, Set-Cookie, Authorization header), replacing the previous inconsistent mix of BYPASS and MISS.
MISS is now reserved exclusively for cacheable responses that were not in the local cache at request time, improving accuracy of cache hit ratio calculations.
Cloudflare AI Gateway adds a unified REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. to call any AI model through new endpoints.
Introduces POST /ai/run, POST /ai/v1/chat/completions, POST /ai/v1/responses, and POST /ai/v1/messages endpoints on api.cloudflare.com for unified AI model access.
Enables third-party model requests to be billed through Unified Billing, eliminating the need to manage separate provider API keys.
Workers can now route requests to Cloudflare WAN destinations via VPCVPCA logically isolated virtual network inside a public cloud provider's infrastructure, letting tools deploy resources with private addressing, controlled routing, and firewall rules without managing physical hardware. Network bindings.
Adds network_id: "cf1:network" binding support in VPC Networks config to reach private network services from Workers
Cloudflare introduces granular permissions scoped to individual Tunnel and Mesh nodes via resource picker and new API filtering.
Cloudflare Tunnel instances and Cloudflare Mesh nodes are now listed as scopable resource types when adding a member or creating a permission policy
Listing endpoints return only resources the principal has at least read access to, changing the surface of enumeration for GET /accounts/{id}/cfd_tunnel and GET /accounts/{id}/warp_connector
Cloudflare rolls out refreshed DNS records UX with resizable columns, logical filters, and mobile support
Adds resizable and hideable columns, row pinning, advanced filters with logical operators (AND/OR), configurable pagination, and expanded input fields to the DNS records page in the Cloudflare dashboard
Introduces a first-class mobile experience with responsive layout, touch-friendly card-based UI, and compact controls for small screens
Adds DNS quick reference explainers for DNS, proxy status, and TTLTTLTime to live, a limit on how long data remains valid or how far a packet can travel. Caches use a time limit; IP packets use a hop limit. directly in the product to help users configure records without leaving the page
Cloudflare Radar adds MRT Explorer in Routing section for browser-based BGPBGPA routing protocol that lets autonomous systems on the internet exchange reachability information, determining how traffic flows between networks. Cyber tools use it to monitor route hijacks or inject sinkholes. dump parsing and inspection
Adds MRT Explorer tool in the Radar Routing section for analyzing BGP announcements, withdrawals, and route attributes from MRT dump files entirely in the browser without uploading data.
Supports loading MRT files via URL paste, drag-and-drop, or local file browse, including Gzip and bzip2 compressed formats, with a sample file provided to get started.
Enables inspecting BGP events by timestamp, prefix, AS path, OTC (Only to Customer), and community attributes, with full event JSON available via View details modal.
Generates shareable URLs containing the source file query string so recipients can immediately fetch and parse the same MRT file in their browser.
Cloudflare CASBCASBA Cloud Access Security Broker is a policy-enforcement proxy, on-premises or cloud-hosted, that sits between users and cloud services to provide visibility, compliance controls, and threat protection over SaaS and IaaS traffic. adds Claude Compliance API integration to scan projects, files, chats, and artifacts for DLPDLPData Loss Prevention: a category of controls that inspect and block sensitive data from leaving an organisation via email, web, or removable media, giving cyber tools a policy enforcement layer over data in motion and at rest. violations.
Adds Claude Compliance API integration to ingest audit logs and administrative actions from Claude Enterprise and Claude Platform
Adds scanning for Project attachment (files/documents violating DLP policies) in public projects
Adds scanning for Chat files (user-uploaded and provider-generated files violating DLP policies)
Adds scanning for Chat messages (prompts/responses violating DLP policies)
Adds scanning for Artifacts (provider-generated documents/files violating DLP policies)
Cloudflare Access now supports Cloudflare as an IdPIdPA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. and new account member selector
Adds support for using Cloudflare as an identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. in Access applications, replacing One-time PIN as the default for new Zero Trust accounts.
Introduces a new Cloudflare Account Member selector policy that matches users based on their membership in a Cloudflare account.
Hyperdrive now exposes database connection pool size metrics via UI chart and GraphQL API
Adds a Pool connections chart in the Cloudflare dashboard to visualize waiting clients, open connections, and pool size maximum for Hyperdrive configurations
Exposes hyperdrivePoolSizesAdaptiveGroups dataset in the GraphQL Analytics API with fields currentPoolSize, availablePoolSlots, waitingClients, and maxPoolSize
Cloudflare Access login page refreshed with unified card, consistent styling, mobile improvements and dark mode support
Unified authentication card groups all sign-in options (identity provideridentity providerA service that authenticates users and supplies identity information to other applications. It is the sign-in authority behind many single sign-on systems. buttons, email input, OTPOTPOne-time password: a short-lived numeric or alphanumeric code valid for a single authentication attempt, generated via TOTP or HOTP standards, giving cyber tools phishing-resistant second-factor verification without stored shared secrets.) in a single card with consistent styling
Consistent button styling applies uniform size and layout to identity provider buttons for easier scanning
Better mobile experience with responsive layout improvements for phones and tablets
R2 Data Catalog now exposes Iceberg API and maintenance metrics via two new GraphQL Analytics datasets.
Exposes r2CatalogDataOperationsAdaptiveGroups dataset to track Iceberg REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. requests including operation type, duration, status, and bytes.
Exposes r2CatalogTableMaintenanceAdaptiveGroups dataset to track table maintenance jobs such as compaction and snapshot expiration success rates and metrics.
Both new datasets support filtering by warehouse name, namespace, table name, and time range, with percentile aggregations for duration metrics.
New Agent Readiness tab in URL Scanner provides six scores for AI agent optimization.
Adds an Agent Readiness tab to URL Scanner reports in the Cloudflare Dashboard showing Basic Web Presence, Discoverability, Content Accessibility, Bot Access Control, Protocol Discovery, and Commerce scores
Enables retrieval of Agent Readiness scores via the URL Scanner API
Cloudflare WAN and Magic Transit now support standard NAT-T for IKE on UDPUDPA network protocol that sends individual messages without guaranteeing delivery or order. Applications trade built-in reliability for less overhead and can add their own recovery. port 500
Adds NAT-T support for IPsecIPsecA suite of IETF protocols that authenticate and encrypt IP packets at the network layer, giving cyber tools a standards-based way to build VPNs or secure host-to-host tunnels without modifying applications. tunnels on Cloudflare WAN allowing devices behind NAT to initiate IKE on UDP port 500 and switch to UDP port 4500 after detection
Cloudflare One Client for macOS reaches GA with new UI and warp-cli mdm refresh command
└──▷ TRY IT
Force the macOS agent to re-fetch its MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. policies immediately rather than waiting for the next scheduled check.
$ warp-cli mdm refresh
warp-cli mdm refresh subcommand added to execute an immediate refresh of the Mobile Device Management (MDM) configuration file
Cloudflare One Client for Windows GA adds MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. refresh CLI, context menu UI, captive portal flow, and initial macOS support
└──▷ USE IT
Immediately sync MDM policy changes on a managed Windows endpoint without waiting for the background check interval.
shell
warp-cli mdm refresh
Adds the warp-cli mdm refresh subcommand to trigger an immediate Mobile Device Management configuration refresh on demand.
Introduces a right-click context menu in the new Windows UI for quick access to common client actions.
Adds a built-in captive portal login experience for Windows users who need to authenticate on network gateways.
Cloudflare One Client for Linux 2026.4.1350.0 adds GA status, new UI, warp-cli mdm refresh command, and RHELRHELRed Hat Enterprise Linux, a commercially supported Linux distribution maintained by Red Hat, chosen by cyber tools for its long support lifecycle, certified hardware compatibility, and enterprise deployment prevalence. 9 support.
warp-cli mdm refresh command added to immediately refresh MDMMDMMobile device management, centrally configuring and managing enrolled devices. Administrators use it to apply settings, distribute applications and enforce device security policies. configuration files
RHEL 9 support for Cloudflare Mesh nodes (requires EPEL repository)
New Cloudflare One Client UI for Linux with right-click context menu and captive portal login
New API endpoints allow creating, rotating, and deleting Cloudflare One Virtual Appliance instances via REST calls.
Adds POST /accounts/{account_id}/magic/connectors endpoint with device.provision_license: true to create a virtual appliance instance and receive its license key in the response.
Adds PATCH /accounts/{account_id}/magic/connectors/{connector_id} endpoint with provision_license: true to rotate the license key for an existing virtual appliance, revoking the previous key immediately.
Enables deletion of virtual appliances via the API, which releases the associated licensed device.
Cloudflare One Appliance breakout rules now support matching by source LAN interface or IP.
Breakout traffic rules can now match by source in addition to destination application
Breakout or priority behavior can be pinned to a source LAN interface, automatically including attached VLANs
Breakout or priority behavior can be pinned to a source IP address, range, or CIDRCIDRA notation for a block of IP addresses, such as 10.0.0.0/24. The number after the slash says how many leading address bits identify the network. block
Automatic tracing across Durable Object and Worker subrequests now propagates trace context for unified views.
Traces now propagate automatically across Worker-to-Worker subrequests via service bindings, producing a single unified trace view instead of disconnected traces
Service binding and Durable Object calls are now recorded as nested child spans within the main trace, enabling debugging of cross-Worker request flows in the Cloudflare dashboard or external OpenTelemetryOpenTelemetryAn open standard and set of tools for collecting traces, metrics and logs from applications. It lets services export observability data without tying instrumentation to one monitoring vendor. platforms
Cloudforce One Threat Events API now accepts format=taxii for TAXIITAXIIA protocol for sharing threat intelligence over HTTPS, commonly carrying STIX data. It lets tools retrieve and exchange intelligence from compatible services.-streamed threat intel.
└──▷ TRY IT
Ingest Cloudforce One threat events directly into a TAXII-capable SIEMSIEMSecurity information and event management, collecting logs from many systems and correlating events to find suspicious activity. Analysts use it to investigate alerts and incidents. or TIP.
$ GET /accounts/{account_id}/cloudforce_one/threat_events?format=taxii
Adds taxii as a supported value for the format query parameter on the Threat Events API endpoint
Enables automated ingestion of Cloudforce One threat indicators into SIEM, TIP, and SOARSOARSecurity orchestration, automation and response, coordinating incident workflows across tools. Playbooks can gather evidence, assign work or carry out approved response actions. tools via TAXII protocol without custom translation scripts
Cloudflare Radar adds TLDTLDThe rightmost label in a domain name (e.g., .com, .gov, .uk), maintained by IANA's root zone. Cyber tools filter or pivot on TLDs to scope scans, flag suspicious registrations, or classify traffic by geography or type. authoritative nameserver latency metrics via new widgets and API.
Adds aggregate nameserver latency, per-nameserver median latency, geographic distribution map, and rank change deltas to TLD detail pages in Cloudflare Radar UI
Adds /tlds/performance/summary/{dimension} and /tlds/performance/timeseries_groups/{dimension} endpoints to the new TLD Performance API supporting LATENCY, NAMESERVER_LATENCY, and LOCATION_LATENCY dimensions
Cloudflare WAFWAFA reverse proxy that inspects HTTP/HTTPS traffic and blocks requests matching known attack patterns such as SQL injection or XSS, sitting between clients and a web application to filter malicious input before it reaches the server. adds new detections for Command Injection, PHP Object Injection, and Bash bypass, plus changes actions to Block for XSSXSSCross-site scripting, an attack that runs malicious script in another user's browser through a trusted site. It can steal data or perform actions using the user's session. rules.
Adds ...f0884a68: XSS, HTML Injection - Object Tag - Body (beta) detection with new action set to Block
Adds ...ff012303: XSS, HTML Injection - Object Tag - Headers detection with new action set to Block
Adds ...16f921d9: XSS, HTML Injection - Object Tag - URI detection with new action set to Block
Adds ...dc90d21a: Command Injection - Generic 9 - Body Vector - Beta detection with new action set to Disabled
Adds ...f8960375: Command Injection - Generic 9 - Header Vector - Beta detection with new action set to Disabled
+14 moreshow less
Adds ...ef47a800: Command Injection - Generic 9 - URI Vector - Beta detection with new action set to Disabled
Adds ...beebf804: Command Injection - Sleep - Body detection with new action set to Disabled
Adds ...0d257566: Command Injection - Sleep - Headers detection with new action set to Disabled
Adds ...1856fe86: Command Injection - Sleep - URI detection with new action set to Disabled
Adds ...e6e43c37: Fortinet FortiSandbox - Command Injection - CVE:CVE-2026-39808 detection with new action set to Block
Adds ...88118795: Remote Code Execution - Common Bash Bypass - Headers detection with new action set to Disabled
Adds ...9299d53b: Remote Code Execution - Common Bash Bypass - URI detection with new action set to Disabled
Adds ...b0bf33f9: Remote Code Execution - Common Bash Bypass - Body - Beta detection with new action set to Disabled
Adds ...33bfe8b9: PHP Object Injection - 2 - Body - Beta detection with new action set to Disabled
Adds ...29552387: PHP Object Injection - 2 - Headers detection with new action set to Disabled
Adds ...8104f4c5: PHP Object Injection - 2 - URI detection with new action set to Disabled
Adds ...6a46201e: SQLi - DROP - 2 - Beta detection with new action set to Disabled
Adds ...8b7f85ee: SQLi - DROP - 2 - Headers detection with new action set to Disabled
Adds ...1546b5f0: SQLi - DROP - 2 - URI detection with new action set to Disabled
Cloudflare Radar adds BGPBGPA routing protocol that lets autonomous systems on the internet exchange reachability information, determining how traffic flows between networks. Cyber tools use it to monitor route hijacks or inject sinkholes. routing widgets and API endpoints for IP space analysis
Adds Top ASes by announced IP space chart on country pages to show IPv4/IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. origin breakdown by Autonomous System
Adds RPKI ROA deployment timeseries widget on global, country, and AS views with toggle for prefix vs IP address space coverage
Exposes new /bgp/ips/top/ases endpoint on the BGP API for top ASNASNAutonomous System Number — a globally unique identifier assigned by regional internet registries to a network operator, letting routing protocols distinguish which organization controls a block of IP addresses. announcements by IPv4 /24 or IPv6 /48
Exposes new /bgp/rpki/roas/timeseries endpoint on the BGP API for RPKI ROA validation coverage over time
Adds default-on Gmail filter for MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Servers and configurable tool-call timeouts for self-hosted Arcade deployments.
Add default-on filter to exclude automated noise from Gmail search/list results in Arcade MCP Servers
1 detail in Everything
2 more releases in this issue
· 2026-05-01 → 2026-05-15
Arcade adds domain modules to its first-party MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. server and OAuth bearer path handling for user_source gateways
Major overhaul of the first-party MCP with new domain modules and tools
Arcade 2026-05-01 adds Linear milestone management, Telegram toolkit, and partner badge.
Linear milestone management tools (queries/mutations) for project planning workflows
Telegram toolkit with core messaging tools using Telegram Bot API
Partner badge and Tavily as first partner MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface.
Adds autopilot, swarm, query, and audit AI agent modes with in-process olium runtime
Supports --source flag on agent modes for filesystem-level code analysis and deep static security audits
Introduces multi-tenancy via project_uuid with config merging (global → project → profile → CLI)
Enables flexible inputs including OpenAPIOpenAPIA vendor-neutral specification for describing REST APIs in a machine-readable format, maintained by the OpenAPI Initiative. Cyber tools use it to auto-generate clients, documentation, and validation from a single source of truth., Swagger, Postman, Burp XML, cURL, HARHARAn HTTP Archive file, a JSON-format log of all network requests and responses captured by a browser's developer tools, used by cyber tools to replay, inspect, or analyze web traffic without re-running a live session., Nuclei, and stdin piping
Adds REST APIREST APIA web API design style where clients interact with resources over HTTP using standard methods like GET, POST, and DELETE, giving cyber tools a predictable, language-agnostic way to integrate with external services. server deployment shape with Fiber and Swagger UI alongside CLI and ingestor client
+3 moreshow less
Supports SQLite (default) and PostgreSQL via Bun ORM for storage
Provides console, jsonl, and html output formats plus embedded ag-grid HTML report
Allows custom active/passive modules in JavaScript via Sobek engine and vigolium.* API
THE CYBER TOOLCHAIN